8.2Alta
CVE-2026-25511Group-Office is vulnerable to SSRF and File Read in WOPI service discovery
Descripción
Group-Office is an enterprise customer relationship management and groupware tool. Prior to versions 6.8.150, 25.0.82, and 26.0.5, an authenticated user within the System Administrator group can trigger a full SSRF via the WOPI service discovery URL, including access to internal hosts/ports. The SSRF response body can be exfiltrated via the built‑in debug system, turning it into a visible SSRF. This also allows full server-side file read. This issue has been patched in versions 6.8.150, 25.0.82, and 26.0.5.
Debilidad (CWE):
CWE-918
Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.
Productos y versiones afectados
| Fabricante | Producto | Versiones | |
|---|---|---|---|
| Intermesh | groupoffice | < 6.8.150, < 25.0.82, < 26.0.5 | |
| group-office | group office | 6.8.0 – < 6.8.150 |
Referencias y parches
Coincidencias CPE (NVD) (3)
cpe:2.3:a:group-office:group_office:*:*:*:*:*:*:*:*≥ 6.8.0 < 6.8.150cpe:2.3:a:group-office:group_office:*:*:*:*:*:*:*:*≥ 25.0.1 < 25.0.82cpe:2.3:a:group-office:group_office:*:*:*:*:*:*:*:*≥ 26.0.1 < 26.0.5