Approved changes feed: RSS · Atom

cpe:2.3:a:group-office:group_office:6.8.99:*:*:*:*:*:*:*

part: a version: 6.8.99 update: *

VendorGroup Office (3d41f67d-254e-5d7a-84ef-5601d909d436)
ProductGroup Office (5e2042f5-b240-5ec4-9575-c1c6321e32c0)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:docker/intermesh/groupoffice purl2cpe 2026-06-01 10:11:34.953893
pkg:github/intermesh/groupoffice purl2cpe 2026-06-01 10:11:34.953894

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-25191 vulnerable 2026-06-08 07:12:50.821116 Group-Office has a Stored XSS Vulnerability via user's name field
Group-Office is an enterprise CRM and groupware tool. This Stored XSS vulnerability exists where user input in the Name field is not properly sanitized before being stored. This vulnerability is fixed in 6.8.100.
Published: 2025-03-06T18:41:00.761Z
Updated: 2025-03-06T20:35:12.106Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.