Skip to content
OpenAdvisories
Medium · 5.4 CVE-2024-23941 EUVD-2024-21371GHSA-5rhg-f75j-57f8

Cross-site scripting vulnerability exists in Group Office prior to v6.6.182, prior to v6.7.64 and prior to v6.8.31, which may allow a remot…

Published Feb 1, 2024 · Updated Jun 4, 2025 · Assigned by jpcert

Description

Cross-site scripting vulnerability exists in Group Office prior to v6.6.182, prior to v6.7.64 and prior to v6.8.31, which may allow a remote authenticated attacker to execute an arbitrary script on the web browser of the user who is logging in to the product.

Affected products

VendorProductAffectedFixed
Intermesh Group Office prior to v6.6.182, prior to v6.7.64, prior to v6.8.31 —

References