CVE-2025-53505: Path Traversal
Published Aug 21, 2025
·Updated
Group-Office versions prior to 6.8.119 and prior to 25.0.20 provided by Intermesh BV contain a path traversal vulnerability. If this vulnerability is exploited, information on the server hosting the product may be exposed.
Affected Software
3 affected components
Intermesh Group-Office<6.8.119, <25.0.20
Group-Office Group Office<6.8.119
Group-Office Group Office>=25.0.1<25.0.20
Event History
Aug 21, 2025
CVE Published
via MITRE·04:29 AM
Data Sourced
via MITRE·04:29 AM
DescriptionSeverity
Data Sourced
via NVD·05:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-53505?
CVE-2025-53505 has a critical severity level due to its potential for exposing sensitive information on the server.
2
How do I fix CVE-2025-53505?
To fix CVE-2025-53505, upgrade Group-Office to versions 6.8.119 or 25.0.20 or later.
3
What applications are affected by CVE-2025-53505?
CVE-2025-53505 affects Intermesh Group-Office versions prior to 6.8.119 and prior to 25.0.20.
4
What type of vulnerability is CVE-2025-53505?
CVE-2025-53505 is a path traversal vulnerability.
5
What could happen if CVE-2025-53505 is exploited?
If CVE-2025-53505 is exploited, an attacker may gain access to sensitive information on the server hosting Group-Office.