CVE-2023-46730

Group-Office is an enterprise CRM and groupware tool. In affected versions there is full Server-Side Request Forgery SSRF vulnerability in the /api/upload.php endpoint. The /api/upload.php endpoint does not filter URLs which allows a malicious user to cause the server to make resource requests to...

CVE-2023-46730: Server-Side Request Forgery (SSRF)

Group-Office is an enterprise CRM and groupware tool. In affected versions there is full Server-Side Request Forgery SSRF vulnerability in the /api/upload.php endpoint. The /api/upload.php endpoint does not filter URLs which allows a malicious user to cause the server to make resource requests to...

PT-2023-30174

Name of the Vulnerable Software and Affected Versions Group-Office versions prior to 6.8.15 Group-Office versions prior to 6.7.54 Group-Office versions prior to 6.6.177 Description The issue is related to a full Server-Side Request Forgery SSRF vulnerability in the "/api/upload.php" endpoint. Thi...