Approved changes feed: RSS · Atom

cpe:2.3:a:group-office:group_office:6.6.145:*:*:*:*:*:*:*

part: a version: 6.6.145 update: *

VendorGroup Office (3d41f67d-254e-5d7a-84ef-5601d909d436)
ProductGroup Office (5e2042f5-b240-5ec4-9575-c1c6321e32c0)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:docker/intermesh/groupoffice purl2cpe 2026-06-01 10:11:34.952931
pkg:github/intermesh/groupoffice purl2cpe 2026-06-01 10:11:34.952932

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-25292 vulnerable 2026-06-08 05:56:08.724918 Details available
Reflected Cross Site Scripting (XSS) in Intermesh BV Group-Office version 6.6.145, allows attackers to gain escalated privileges and gain sensitive information via the GO_LANGUAGE cookie.
Published: 2023-04-27T00:00:00.000Z
Updated: 2026-07-09T00:24:11.946Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.