CVE-2023-25292

2023-04-2701:15:08

Google

osv.dev

reflected cross site scripting

group-office

version 6.6.145

privilege escalation

go_language cookie

security vulnerability

AI Score

6.2

Confidence

High

EPSS

0.001

Percentile

42.9%

JSON

Reflected Cross Site Scripting (XSS) in Intermesh BV Group-Office version 6.6.145, allows attackers to gain escalated privileges and gain sensitive information via the GO_LANGUAGE cookie.

References

group-office.com

intermesh.com

github.com/brainkok/CVE-2023-25292