PT-2024-19408 · Unknown · Group-Office

Cupc4K3 · Published 2024-01-18 · Updated 2024-01-25 · CVE-2024-22418

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Group-Office versions prior to 6.8.29

Description The issue is related to the file upload mechanism in Group-Office, allowing an attacker to execute arbitrary JavaScript code by embedding it within a file's name. For example, using a filename such as "><img src=x onerror=prompt('XSS')>.jpg" can trigger this issue. When such a file is uploaded, the JavaScript code within the filename is executed.

Recommendations For versions prior to 6.8.29, upgrade to version 6.8.29 or later to address the issue. As a temporary workaround, consider restricting file uploads or validating filenames to prevent the execution of embedded JavaScript code. Avoid using filenames that contain potentially executable code until the issue is resolved.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2024-22418

GHSA-P7W9-H6C3-WQPP

Affected Products

Group-Office

References · 7

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/22xxx/CVE-2024-22418.json · Exploit
• 🔥 https://github.com/Intermesh/groupoffice/security/advisories/GHSA-p7w9-h6c3-wqpp · Exploit
• https://github.com/Intermesh/groupoffice/commit/2a52a5d42d080db6738d70eba30294bcd94ebd09 · Patch
• https://osv.dev/vulnerability/CVE-2024-22418 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-22418 · Security Note
• https://twitter.com/VulmonFeeds/status/1748131400652403067 · Twitter Post
• https://twitter.com/CVEnew/status/1748085966248841604 · Twitter Post