agentprime: intermesh-groupofficeEvery new CVE for intermesh-groupoffice.https://agentprime.io/CVE-2026-63653: Group-Office: SSRF via Bookmark/description JMAP action — server makes arbitrary HTTP(S) requests to user-controlled URL and reflects part of the responsehttps://agentprime.io/advisories/CVE-2026-63653/https://agentprime.io/advisories/CVE-2026-63653/CVSS 5.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 10 Nov 2026 16:35:51 GMTCVECVE-2026-63011: GroupOffice Vulnerable to RCE in TemplateParser eval() via Contact/labelshttps://agentprime.io/advisories/CVE-2026-63011/https://agentprime.io/advisories/CVE-2026-63011/CVSS 9.4 (Critical). Critical: CVSS score 9.4: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 10 Nov 2026 16:35:37 GMTCVEcriticalCVE-2026-63010: Group-Office: Stored XSS via Manual Remindershttps://agentprime.io/advisories/CVE-2026-63010/https://agentprime.io/advisories/CVE-2026-63010/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 10 Nov 2026 16:35:20 GMTCVECVE-2026-45551: Group-Office: Authenticated Stored XSS in Administrator Context via Arbitrary Cross-User Setting Writehttps://agentprime.io/advisories/CVE-2026-45551/https://agentprime.io/advisories/CVE-2026-45551/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 29 May 2026 12:34:22 GMTCVECVE-2026-34838: Group-Office: Authenticated Remote Code Execution via PHP Insecure Deserialization in `AbstractSettingsCollection`https://agentprime.io/advisories/CVE-2026-34838/https://agentprime.io/advisories/CVE-2026-34838/CVSS 10.0 (Critical). Critical: CVSS score 10.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 02 Apr 2026 19:15:40 GMTCVEcriticalCVE-2026-33755: Authenticated SQL Injection in Contact/query addressBookIds filterhttps://agentprime.io/advisories/CVE-2026-33755/https://agentprime.io/advisories/CVE-2026-33755/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 27 Mar 2026 14:08:38 GMTCVECVE-2026-30238: Group-Office: Reflected XSS in JavaScript contexthttps://agentprime.io/advisories/CVE-2026-30238/https://agentprime.io/advisories/CVE-2026-30238/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 06 Mar 2026 21:14:03 GMTCVECVE-2026-30237: Group-Office: Self XSS in GroupOffice Installer License Page (install/license.php)https://agentprime.io/advisories/CVE-2026-30237/https://agentprime.io/advisories/CVE-2026-30237/CVSS 2.1 (Low). Published by the CVE Program. Not analysed by agentprime yet.Fri, 06 Mar 2026 21:13:33 GMTCVECVE-2026-27947: Group-Office Vulnerable to Remote Code Execution (RCE)https://agentprime.io/advisories/CVE-2026-27947/https://agentprime.io/advisories/CVE-2026-27947/CVSS 9.4 (Critical). Critical: CVSS score 9.4: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 27 Feb 2026 19:52:41 GMTCVEcriticalCVE-2026-27832: Group-Office Has Authenticated SQL Injection in advancedQueryData.comparatorhttps://agentprime.io/advisories/CVE-2026-27832/https://agentprime.io/advisories/CVE-2026-27832/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 27 Feb 2026 19:49:57 GMTCVECVE-2026-25511: Group-Office is vulnerable to SSRF and File Read in WOPI service discoveryhttps://agentprime.io/advisories/CVE-2026-25511/https://agentprime.io/advisories/CVE-2026-25511/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Feb 2026 20:40:04 GMTCVECVE-2026-25512: Group-Office is vulnerable to RCE due to Command Injection via TNEF Attachment Handlerhttps://agentprime.io/advisories/CVE-2026-25512/https://agentprime.io/advisories/CVE-2026-25512/CVSS 9.4 (Critical). Critical: CVSS score 9.4: 9.0 or more. CVSS score 9.4 (7.0 or more) and EPSS 0.20 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Feb 2026 20:39:08 GMTCVEcriticalCVE-2026-25134: Group-Office Argument Injection in MaintenanceController::actionZipLanguagehttps://agentprime.io/advisories/CVE-2026-25134/https://agentprime.io/advisories/CVE-2026-25134/CVSS 9.4 (Critical). Critical: CVSS score 9.4: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Mon, 02 Feb 2026 22:40:15 GMTCVEcriticalCVE-2026-23887: Group-Office has stored XSS vulnerability via unsanitized filenameshttps://agentprime.io/advisories/CVE-2026-23887/https://agentprime.io/advisories/CVE-2026-23887/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Jan 2026 23:39:05 GMTCVECVE-2025-48993: Group-Office vulnerable to reflected XSS via Look and Feel Formatting inputhttps://agentprime.io/advisories/CVE-2025-48993/https://agentprime.io/advisories/CVE-2025-48993/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 17 Jun 2025 00:43:35 GMTCVECVE-2025-48992: Group-Office vulnerable to blind XSShttps://agentprime.io/advisories/CVE-2025-48992/https://agentprime.io/advisories/CVE-2025-48992/CVSS 5.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 16 Jun 2025 22:17:28 GMTCVECVE-2025-48369: GroupOffice vulnerable to Stored XSS in Tasks Comment Sectionhttps://agentprime.io/advisories/CVE-2025-48369/https://agentprime.io/advisories/CVE-2025-48369/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 22 May 2025 17:33:06 GMTCVECVE-2025-48368: GroupOffice's DOM-Based XSS in all Date Input Fields Allows Arbitrary JavaScript Executionhttps://agentprime.io/advisories/CVE-2025-48368/https://agentprime.io/advisories/CVE-2025-48368/CVSS 5.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 22 May 2025 17:29:57 GMTCVECVE-2025-48366: GroupOffice's Blind Stored XSS in Phone Number Field Enables Forced Redirect and Unauthorized Actionshttps://agentprime.io/advisories/CVE-2025-48366/https://agentprime.io/advisories/CVE-2025-48366/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 22 May 2025 17:28:26 GMTCVECVE-2025-25191: Group-Office has a Stored XSS Vulnerability via user's name fieldhttps://agentprime.io/advisories/CVE-2025-25191/https://agentprime.io/advisories/CVE-2025-25191/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 06 Mar 2025 18:41:00 GMTCVECVE-2024-22418: Stored Cross-site Scripting Vulnerability via Malicious File Names in GroupOfficehttps://agentprime.io/advisories/CVE-2024-22418/https://agentprime.io/advisories/CVE-2024-22418/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 18 Jan 2024 20:44:57 GMTCVECVE-2023-46730: Server-Side Request Forgery in groupofficehttps://agentprime.io/advisories/CVE-2023-46730/https://agentprime.io/advisories/CVE-2023-46730/CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 07 Nov 2023 17:35:36 GMTCVE