CVE-2024-23941: XSS
Cross-site scripting vulnerability exists in Group Office prior to v6.6.182, prior to v6.7.64 and prior to v6.8.31, which may allow a remote authenticated attacker to execute an arbitrary script on the web browser of the user who is logging in to the product.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-23941?
CVE-2024-23941 has a medium severity level, indicating it could have moderate impact under specific conditions.
How do I fix CVE-2024-23941?
To fix CVE-2024-23941, upgrade your Group Office installation to versions 6.6.182, 6.7.64, or 6.8.31 or later.
Who is affected by CVE-2024-23941?
CVE-2024-23941 affects users of Group Office versions prior to 6.6.182, 6.7.64, and 6.8.31.
What type of vulnerability is CVE-2024-23941?
CVE-2024-23941 is a cross-site scripting (XSS) vulnerability.
Can CVE-2024-23941 be exploited remotely?
Yes, a remote authenticated attacker can exploit CVE-2024-23941 to execute arbitrary scripts in the victim's web browser.