CVE-2025-63406 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

An issue in Intermesh BV GroupOffice vulnerable before v.25.0.47 and 6.8.136 allows a remote attacker to execute arbitrary code via the dbToApi() and eval() in…
High CVSS: 8.8

CVE-2025-63406

An issue in Intermesh BV GroupOffice vulnerable before v.25.0.47 and 6.8.136 allows a remote attacker to execute arbitrary code via the dbToApi() and eval() in the FunctionField.php
Vendor
Group-office
Product
Group Office
CWE
CWE-77
Yayın Tarihi
2025-11-13 19:15:48
Güncelleme
2026-01-09 15:45:50
Source Identifier
cve@mitre.org
KEV Date Added
-

Kategoriler

CWE-77 Group Office HIGH Group-office 2025

Referanslar

https://github.com/WinDyAlphA/CVE-2025-63406-PoC https://noahheraud.com/posts/CVE-2025-63406/