CVE 8.8 HIGH

CVE-2025-63406_CVE-2025-63406

8.8 / 10
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

An issue in Intermesh BV GroupOffice vulnerable before v.25.0.47 and 6.8.136 allows a remote attacker to execute arbitrary code via the dbToApi() and eval() in the FunctionField.php

AI Analysis

Remote code execution vulnerability in GroupOffice via dbToApi() and eval() in FunctionField.php

Basic Information

ID CVE-2025-63406
Source mitre
Published Nov 13, 2025 at 00:00
Modified Nov 14, 2025 at 16:58

Affected Product

Vendor Intermesh BV
Product GroupOffice
Version before v.25.0.47, 6.8.136
Affected Versions n/a n/a n/a

CWE Classification

AI Assessment

AI Score 8.8 / 10
AI Severity High
Vendor Intermesh BV
Product GroupOffice
Version before v.25.0.47, 6.8.136

References

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.