VULNERABILITY INTELLIGENCE

CVE-2024-22418

CVSS score6.5 MEDIUM

EPSS probability0.42%

CISA KEVNot currently listed

Published2024-01-18

Last modified2026-06-17

Description

Group-Office is an enterprise CRM and groupware tool. Affected versions are subject to a vulnerability which is present in the file upload mechanism of Group Office. It allows an attacker to execute arbitrary JavaScript code by embedding it within a file's name. For instance, using a filename such a…