15 matches found
CVE-2024-22418
CVE-2024-22418 affects Group-Office, exposing a stored cross-site scripting (XSS) vulnerability in the file upload mechanism where an attacker can embed JavaScript in a filename (example: >.jpg). The issue is triggered during file upload and is addressed in Group-Office version 6.8.29. Affecte...
CVE-2024-23941
The CVE-2024-23941 entry affects Group Office: a stored cross-site scripting vulnerability (CWE-79) that could allow a remote authenticated attacker to execute arbitrary scripts in the web browser of the logged-in user. Affected versions are Group Office < 6.6.182, < 6.7.64, and
CVE-2023-25292
Group-Office (Intermesh BV) has a Reflected XSS in version 6.6.145 where the GO_LANGUAGE cookie can be manipulated to inject script, potentially exposing sensitive data and enabling privilege escalation. Root cause: improper handling/encoding of the GO_LANGUAGE cookie leads to reflected script in...
CVE-2023-46730
CVE-2023-46730 (Group-Office) : A full Server-Side Request Forgery (SSRF) vulnerability exists in the /api/upload.php endpoint of Group-Office. The endpoint does not filter URLs, allowing an attacker to cause the server to fetch resources from untrusted domains, with possible access to local disk...
CVE-2025-25191
CVE-2025-25191 affects Group-Office Group Office CRM: a Stored XSS via the Name field due to insufficient sanitization before storage. Fixed in version 6.8.100. No exploitation details are provided in the connected documents.
CVE-2020-35419
Group Office CRM 6.4.196 is affected by a Cross Site Scripting (XSS) vulnerability exploitable via the SET_LANGUAGE parameter. The issue is documented across multiple sources (NVD, Red Hat, CNVD, OSV, etc.) with the same vector, indicating the vulnerability resides in the handling of the SET_LANG...
CVE-2020-35418
The CVE-2020-35418 entry concerns Group Office CRM 6.4.196, where an XSS vulnerability exists on the Contacts/ contact page triggered by uploading a crafted SVG file. This is a server-side handling issue that allows injected script via SVG uploads, potentially impacting user sessions and data exp...
CVE-2021-28060
The supplied connected sources confirm CVE-2021-28060 is a Server-Side Request Forgery in Group Office 6.4.196, allowing a remote attacker to forge GET requests to arbitrary URLs using the url parameter of group/api/upload.php. Core details provided: affected software is Group Office CRM (version...
CVE-2026-25512
CVE-2026-25512 affects Group-Office prior to versions 6.8.150, 25.0.82, and 26.0.5. The vulnerability is an authenticated remote code execution via the /email/message/tnefAttachmentFromTempFile endpoint, where the user-controlled parameter tmp_file is directly concatenated into an exec() call. In...
CVE-2025-53504
Group-Office (Intermesh BV) is affected by a cross-site scripting (CVE-2025-53504) vulnerability, impacting versions prior to 6.8.119 and prior to 25.0.20. The issue allows an arbitrary script to run in a user’s browser when exploited. Remediation per connected sources is to update Group-Office t...
CVE-2025-53505
Group-Office (Intermesh BV) is affected by a path traversal vulnerability (CVE-2025-53505) in versions prior to 6.8.119 and prior to 25.0.20. The issue can lead to exposure of information on the server hosting the product.root cause: path traversal weakness. Impact: server information disclosure ...
CVE-2026-23887
CVE-2026-23887 affects Group-Office. Vulnerability: unsanitized filenames stored in the database can lead to Stored XSS in the file-viewing context. Affected versions: 6.8.148 and earlier, and 25.0.1–25.0.79. Impact is limited to the file-viewing context but may interfere with sessions or browser...
CVE-2026-25511
Group-Office is vulnerable to SSRF and file read through the WOPI service discovery URL. An authenticated user in the System Administrator group can trigger SSRF to access internal hosts/ports, with the SSRF response exfiltrated via the built-in debug system, effectively enabling full server-side...
CVE-2025-63406
CVE-2025-63406 affects Intermesh BV GroupOffice prior to 25.0.47 and 6.8.136. The root cause is improper handling in FunctionField.php (dbToApi() and eval()) that can enable remote code execution. A PoC/PoC-like content exists in linked GitHub repositories; remediation is to upgrade GroupOffice t...