Group-Office vulnerabilities

CVEs whose affected-version data names the Group-Office package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2018-25438High· 7.5

today

Intermesh Group-Office < 3.5.5 Path Traversal via compress.php

Intermesh Group-Office 3.3.0 before 3.5.5 contains an unauthenticated path traversal vulnerability in compress.php that allows remote attackers to read arbitrary files by manipulating the 'file' parameter. Attackers can send GET requests…

▾ TwilightIntermesh · Group-Officevia CVEORG