3 matches found
CVE-2021-28060
A Server-Side Request Forgery SSRF vulnerability in Group Office 6.4.196 allows a remote attacker to forge GET requests to arbitrary URLs via the url parameter to group/api/upload.php...
PT-2021-17733
Name of the Vulnerable Software and Affected Versions: Group Office version 6.4.196 Description: A Server-Side Request Forgery SSRF issue allows a remote attacker to forge GET requests to arbitrary URLs via the url parameter to "group/api/upload.php" API endpoint. Recommendations: For Group Offic...
CVE-2021-28060: Server-Side Request Forgery (SSRF)
A Server-Side Request Forgery SSRF vulnerability in Group Office 6.4.196 allows a remote attacker to forge GET requests to arbitrary URLs via the url parameter to group/api/upload.php...