Medium severity6.1NVD Advisory· Published Apr 27, 2023· Updated Jul 9, 2026
CVE-2023-25292
CVE-2023-25292
Description
Reflected Cross Site Scripting (XSS) in Intermesh BV Group-Office version 6.6.145, allows attackers to gain escalated privileges and gain sensitive information via the GO_LANGUAGE cookie.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- cpe:2.3:a:group-office:group_office:6.6.145:*:*:*:*:*:*:*
- Intermesh BV/Group-Officedescription
- Range: = 6.6.145
Patches
Vulnerability mechanics
News mentions
0No linked articles in our index yet.