CVE-2024-23941
01.02.2024, 04:15
Cross-site scripting vulnerability exists in Group Office prior to v6.6.182, prior to v6.7.64 and prior to v6.8.31, which may allow a remote authenticated attacker to execute an arbitrary script on the web browser of the user who is logging in to the product.
| Vendor | Product | Version |
|---|---|---|
| group-office | group_office | 𝑥 < 6.6.182 |
| group-office | group_office | 6.7.0 ≤ 𝑥 < 6.7.64 |
| group-office | group_office | 6.8.0 ≤ 𝑥 < 6.8.31 |
𝑥
= Vulnerable software versions