Description
Group-Office versions prior to 6.8.119 and prior to 25.0.20 provided by Intermesh BV contain a path traversal vulnerability. If this vulnerability is exploited, information on the server hosting the product may be exposed.
References (2)
Core 2
Core References
Third Party Advisory
https://jvn.jp/en/jp/JVN72111431/
Product
https://www.group-office.com/
Scores
CVSS v3
5.3
EPSS
0.0031
EPSS Percentile
22.2%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
partial
Details
CWE
CWE-22
Status
published
Products (1)
group-office/group_office
< 6.8.119
Published
Aug 21, 2025
Tracked Since
Feb 18, 2026