medium5.4
CVE-2024-23941
Cross-site scripting vulnerability exists in Group Office prior to v6.6.182, prior to v6.7.64 and prior to v6.8.31, which may allow a remote authenticated atta…
Impact
Cross-site scripting vulnerability exists in Group Office prior to v6.6.182, prior to v6.7.64 and prior to v6.8.31, which may allow a remote authenticated attacker to execute an arbitrary script on the web browser of the user who is logging in to the product.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Group-Office | Group Office | before 6.6.182 from 6.7.0 before 6.7.64 from 6.8.0 before 6.8.31 |