CVE-2025-53504: XSS
Published Aug 21, 2025
·Updated
Group-Office versions prior to 6.8.119 and prior to 25.0.20 provided by Intermesh BV contain a cross-site scripting vulnerability. If this vulnerability is exploited, an arbitrary script may be executed in the user's web browser.
Affected Software
3 affected components
Intermesh Group-Office<6.8.119, <25.0.20
Group-Office Group Office<6.8.119
Group-Office Group Office>=25.0.1<25.0.20
Event History
Aug 21, 2025
CVE Published
via MITRE·04:29 AM
Data Sourced
via MITRE·04:29 AM
DescriptionSeverity
Data Sourced
via NVD·05:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-53504?
CVE-2025-53504 is classified as a cross-site scripting vulnerability that can pose significant security risks to affected users.
2
How do I fix CVE-2025-53504?
To fix CVE-2025-53504, upgrade to Group-Office version 6.8.119 or later, or version 25.0.20 or later.
3
Which versions of Group-Office are affected by CVE-2025-53504?
Group-Office versions prior to 6.8.119 and prior to 25.0.20 are affected by CVE-2025-53504.
4
What kind of attacks can CVE-2025-53504 lead to?
CVE-2025-53504 can lead to arbitrary script execution in the user's web browser, allowing for potential data theft or session hijacking.
5
Who is the vendor associated with CVE-2025-53504?
The vendor associated with CVE-2025-53504 is Intermesh BV.