Description
A Server-Side Request Forgery (SSRF) vulnerability in Group Office 6.4.196 allows a remote attacker to forge GET requests to arbitrary URLs via the url parameter to group/api/upload.php.
Unscored
CVE-2021-28060
EUVD-2021-14766GHSA-46jj-588g-jh7g
A Server-Side Request Forgery (SSRF) vulnerability in Group Office 6.4.196 allows a remote attacker to forge GET requests to arbitrary URLs…
Published Apr 14, 2021 · Updated Aug 3, 2024 · Assigned by mitre