4.3Media
CVE-2025-53505
Descripción
Group-Office versions prior to 6.8.119 and prior to 25.0.20 provided by Intermesh BV contain a path traversal vulnerability. If this vulnerability is exploited, information on the server hosting the product may be exposed.
Debilidad (CWE):
CWE-22
Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.
Productos y versiones afectados
| Fabricante | Producto | Versiones | |
|---|---|---|---|
| Intermesh BV | Group-Office | prior to 6.8.119 | |
| group-office | group office | < 6.8.119 |
Referencias y parches
- https://www.group-office.com/ Product
- https://jvn.jp/en/jp/JVN72111431/ Third Party Advisory
Coincidencias CPE (NVD) (2)
cpe:2.3:a:group-office:group_office:*:*:*:*:*:*:*:*< 6.8.119cpe:2.3:a:group-office:group_office:*:*:*:*:*:*:*:*≥ 25.0.1 < 25.0.20