groupoffice 安全漏洞

groupoffice is an Intermesh open source groupware and CRM for group offices. A security vulnerability exists in groupoffice versions prior to 25.0.47 and prior to 6.8.136, which stems from a flaw in the dbToApi and eval functions in FunctionField.php that could lead to the execution of arbitrary...

CVE-2025-63406

CVE-2025-63406 affects Intermesh BV GroupOffice prior to 25.0.47 and 6.8.136. The root cause is improper handling in FunctionField.php (dbToApi() and eval()) that can enable remote code execution. A PoC/PoC-like content exists in linked GitHub repositories; remediation is to upgrade GroupOffice t...