CNNVD-202506-1934 Information
Jun 16, 2025
cve
CNNVD ID
CNNVD-202506-1934
Related CVE
- CNNVD Published: 2025-06-16
Description (Chinese)
groupoffice是Intermesh开源的一个集团办公室群件和CRM。 groupoffice 6.8.123和25.0.27之前版本存在安全漏洞,该漏洞源于存储型和盲型跨站脚本,可能导致执行任意代码。
Description (English)
Groupoffice is a group office of the Intermesh Open Source and CRM. There was a security loophole in the pre-group office 6.8.123 and 25.0.27 versions, which originated in storage and blind cross-site scripts and could lead to the implementation of any code.
Hazard Level
High
Vulnerability Type
其他
Affected Vendor
Intermesh
Published
2025-06-16
Last Modified
2026-02-24
References
https://github.com/Intermesh/groupoffice/security/advisories/GHSA-j35g-q5mc-jwgp https://github.com/Intermesh/groupoffice/commit/2e3695db9cdef1da7a9d754ff4d98f49f6924e2d https://access.redhat.com/security/cve/cve-2025-48992
Patch
https://github.com/Intermesh/groupoffice/releases
Share on: