Group Office Security Vulnerabilities and Issues — Group Office CVE List

Lucene search

Group-officeGroup Office

3 matches found

CVE•added 2024/02/01 4:15 a.m.•194 views

CVE-2024-23941

Cross-site scripting vulnerability exists in Group Office prior to v6.6.182, prior to v6.7.64 and prior to v6.8.31, which may allow a remote authenticated attacker to execute an arbitrary script on the web browser of the user who is logging in to the product.

5.4CVSS5.3AI score0.00103EPSS

CVE•added 2021/04/14 5:15 p.m.•32 views

CVE-2020-35418

Cross Site Scripting (XSS) in the contact page of Group Office CRM 6.4.196 by uploading a crafted svg file.

5.4CVSS5.2AI score0.00172EPSS

CVE•added 2021/04/14 5:15 p.m.•30 views

CVE-2021-28060

A Server-Side Request Forgery (SSRF) vulnerability in Group Office 6.4.196 allows a remote attacker to forge GET requests to arbitrary URLs via the url parameter to group/api/upload.php.

5.3CVSS5.3AI score0.00276EPSS