8.8
/ 10
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Description
An issue in Intermesh BV GroupOffice vulnerable before v.25.0.47 and 6.8.136 allows a remote attacker to execute arbitrary code via the dbToApi() and eval() in the FunctionField.php
AI Analysis
Remote code execution vulnerability in GroupOffice via dbToApi() and eval() in FunctionField.php
Basic Information
ID
CVE-2025-63406
Source
mitre
Published
Nov 13, 2025 at 00:00
Modified
Nov 14, 2025 at 16:58
Affected Product
Vendor
Intermesh BV
Product
GroupOffice
Version
before v.25.0.47, 6.8.136
Affected Versions
n/a n/a n/a
CWE Classification
AI Assessment
AI Score
8.8 / 10
AI Severity
High
Vendor
Intermesh BV
Product
GroupOffice
Version
before v.25.0.47, 6.8.136