Vulnerabilities > CVE-2023-46730 - Server-Side Request Forgery (SSRF) vulnerability in Group-Office Group Office

CVSS 8.8 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

network

low complexity

group-office

CWE-918

NVD

Published: 2023-11-07

Updated: 2023-11-14

Summary

Group-Office is an enterprise CRM and groupware tool. In affected versions there is full Server-Side Request Forgery (SSRF) vulnerability in the /api/upload.php endpoint. The /api/upload.php endpoint does not filter URLs which allows a malicious user to cause the server to make resource requests to untrusted domains. Note that protocols like file:// can also be used to access the server disk. The request result (on success) can then be retrieved using /api/download.php. This issue has been addressed in versions 6.8.15, 6.7.54, and 6.6.177. Users are advised to upgrade. There are no known workarounds for this vulnerability.

Vulnerable Configurations

Part	Description	Count
Application	Group-Office Group Office Group Office 6.8.1 Group Office Group Office 6.8.3 Group Office Group Office 6.8.4 Group Office Group Office 6.8.5 Group Office Group Office 6.8.6 Group Office Group Office 6.8.7 Group Office Group Office 6.8.8 Group Office Group Office 6.8.9 Group Office Group Office 6.8.10 Group Office Group Office 6.8.11 Group Office Group Office 6.8.12 Group Office Group Office 6.8.13 Group Office Group Office 6.8.14 Group Office Group Office 6.7.0 Group Office Group Office 6.7.1 Group Office Group Office 6.7.2 Group Office Group Office 6.7.3 Group Office Group Office 6.7.5 Group Office Group Office 6.7.6 Group Office Group Office 6.7.7 Group Office Group Office 6.7.8 Group Office Group Office 6.7.9 Group Office Group Office 6.7.10 Group Office Group Office 6.7.11 Group Office Group Office 6.7.12 Group Office Group Office 6.7.13 Group Office Group Office 6.7.14 Group Office Group Office 6.7.15 Group Office Group Office 6.7.16 Group Office Group Office 6.7.17 Group Office Group Office 6.7.18 Group Office Group Office 6.7.19 Group Office Group Office 6.7.20 Group Office Group Office 6.7.22 Group Office Group Office 6.7.23 Group Office Group Office 6.7.24 Group Office Group Office 6.7.25 Group Office Group Office 6.7.26 Group Office Group Office 6.7.27 Group Office Group Office 6.7.28 Group Office Group Office 6.7.29 Group Office Group Office 6.7.30 Group Office Group Office 6.7.31 Group Office Group Office 6.7.32 Group Office Group Office 6.7.33 Group Office Group Office 6.7.34 Group Office Group Office 6.7.35 Group Office Group Office 6.7.36 Group Office Group Office 6.7.37 Group Office Group Office 6.7.38 Group Office Group Office 6.7.39 Group Office Group Office 6.7.40 Group Office Group Office 6.7.41 Group Office Group Office 6.7.42 Group Office Group Office 6.7.43 Group Office Group Office 6.7.44 Group Office Group Office 6.7.45 Group Office Group Office 6.7.46 Group Office Group Office 6.7.47 Group Office Group Office 6.7.48 Group Office Group Office 6.7.49 Group Office Group Office 6.7.50 Group Office Group Office 6.7.51 Group Office Group Office 6.7.52 Group Office Group Office 6.7.53 Group Office Group Office 6.3.1 Group Office Group Office 6.3.2 Group Office Group Office 6.3.3 Group Office Group Office 6.3.4 Group Office Group Office 6.3.5 Group Office Group Office 6.3.6 Group Office Group Office 6.3.7 Group Office Group Office 6.3.8 Group Office Group Office 6.3.10 Group Office Group Office 6.3.11 Group Office Group Office 6.3.12 Group Office Group Office 6.3.14 Group Office Group Office 6.3.15 Group Office Group Office 6.3.16 Group Office Group Office 6.3.17 Group Office Group Office 6.3.18 Group Office Group Office 6.3.19 Group Office Group Office 6.3.20 Group Office Group Office 6.3.21 Group Office Group Office 6.3.29 Group Office Group Office 6.3.30 Group Office Group Office 6.3.31 Group Office Group Office 6.3.32 Group Office Group Office 6.3.33 Group Office Group Office 6.3.34 Group Office Group Office 6.3.35 Group Office Group Office 6.3.36 Group Office Group Office 6.3.37 Group Office Group Office 6.3.38 Group Office Group Office 6.3.41 Group Office Group Office 6.3.42 Group Office Group Office 6.3.43 Group Office Group Office 6.3.44 Group Office Group Office 6.3.45 Group Office Group Office 6.3.47 Group Office Group Office 6.3.48 Group Office Group Office 6.3.49 Group Office Group Office 6.3.50 Group Office Group Office 6.3.71 Group Office Group Office 6.3.72 Group Office Group Office 6.3.73 Group Office Group Office 6.3.74 Group Office Group Office 6.3.75 Group Office Group Office 6.3.76 Group Office Group Office 6.3.77 Group Office Group Office 6.3.78 Group Office Group Office 6.3.79 Group Office Group Office 6.3.80 Group Office Group Office 6.3.81 Group Office Group Office 6.3.92 Group Office Group Office 6.3.93 Group Office Group Office 6.3.94 Group Office Group Office 6.3.96 Group Office Group Office 6.3.97 Group Office Group Office 6.3.98 Group Office Group Office 6.3.99 Group Office Group Office 6.4.21 Group Office Group Office 6.4.22 Group Office Group Office 6.4.23 Group Office Group Office 6.4.25 Group Office Group Office 6.4.26 Group Office Group Office 6.4.27 Group Office Group Office 6.4.28 Group Office Group Office 6.4.29 Group Office Group Office 6.4.30 Group Office Group Office 6.4.31 Group Office Group Office 6.4.32 Group Office Group Office 6.4.33 Group Office Group Office 6.4.34 Group Office Group Office 6.4.35 Group Office Group Office 6.4.36 Group Office Group Office 6.4.37 Group Office Group Office 6.4.38 Group Office Group Office 6.4.39 Group Office Group Office 6.4.40 Group Office Group Office 6.4.41 Group Office Group Office 6.4.42 Group Office Group Office 6.4.43 Group Office Group Office 6.4.44 Group Office Group Office 6.4.45 Group Office Group Office 6.4.49 Group Office Group Office 6.4.50 Group Office Group Office 6.4.51 Group Office Group Office 6.4.156 Group Office Group Office 6.4.157 Group Office Group Office 6.4.158 Group Office Group Office 6.4.159 Group Office Group Office 6.4.160 Group Office Group Office 6.4.161 Group Office Group Office 6.4.162 Group Office Group Office 6.4.165 Group Office Group Office 6.4.170 Group Office Group Office 6.4.171 Group Office Group Office 6.4.172 Group Office Group Office 6.4.173 Group Office Group Office 6.4.174 Group Office Group Office 6.4.175 Group Office Group Office 6.4.176 Group Office Group Office 6.4.177 Group Office Group Office 6.4.178 Group Office Group Office 6.4.179 Group Office Group Office 6.4.180 Group Office Group Office 6.4.181 Group Office Group Office 6.4.182 Group Office Group Office 6.4.183 Group Office Group Office 6.4.184 Group Office Group Office 6.4.185 Group Office Group Office 6.4.186 Group Office Group Office 6.4.187 Group Office Group Office 6.4.188 Group Office Group Office 6.4.189 Group Office Group Office 6.4.190 Group Office Group Office 6.4.191 Group Office Group Office 6.4.192 Group Office Group Office 6.4.193 Group Office Group Office 6.4.194 Group Office Group Office 6.4.195 Group Office Group Office 6.4.196 Group Office Group Office 6.4.197 Group Office Group Office 6.4.198 Group Office Group Office 6.4.199 Group Office Group Office 6.4.200 Group Office Group Office 6.4.201 Group Office Group Office 6.4.202 Group Office Group Office 6.4.203 Group Office Group Office 6.4.204 Group Office Group Office 6.4.205 Group Office Group Office 6.4.206 Group Office Group Office 6.4.207 Group Office Group Office 6.4.208 Group Office Group Office 6.4.209 Group Office Group Office 6.4.210 Group Office Group Office 6.4.211 Group Office Group Office 6.4.212 Group Office Group Office 6.4.213 Group Office Group Office 6.4.215 Group Office Group Office 6.4.216 Group Office Group Office 6.4.217 Group Office Group Office 6.4.218 Group Office Group Office 6.4.219 Group Office Group Office 6.4.220 Group Office Group Office 6.4.221 Group Office Group Office 6.4.222 Group Office Group Office 6.4.223 Group Office Group Office 6.4.224 Group Office Group Office 6.4.225 Group Office Group Office 6.4.226 Group Office Group Office 6.4.227 Group Office Group Office 6.4.228 Group Office Group Office 6.4.229 Group Office Group Office 6.4.230 Group Office Group Office 6.4.231 Group Office Group Office 6.4.232 Group Office Group Office 6.4.233 Group Office Group Office 6.4.234 Group Office Group Office 6.4.235 Group Office Group Office 6.4.236 Group Office Group Office 6.4.237 Group Office Group Office 6.4.238 Group Office Group Office 6.4.239 Group Office Group Office 6.4.240 Group Office Group Office 6.4.241 Group Office Group Office 6.4.242 Group Office Group Office 6.4.243 Group Office Group Office 6.4.244 Group Office Group Office 6.4.245 Group Office Group Office 6.4.246 Group Office Group Office 6.4.247 Group Office Group Office 6.5.30 Group Office Group Office 6.5.31 Group Office Group Office 6.5.32 Group Office Group Office 6.5.33 Group Office Group Office 6.5.34 Group Office Group Office 6.5.35 Group Office Group Office 6.5.36 Group Office Group Office 6.5.37 Group Office Group Office 6.5.38 Group Office Group Office 6.5.39 Group Office Group Office 6.5.40 Group Office Group Office 6.5.41 Group Office Group Office 6.5.42 Group Office Group Office 6.5.43 Group Office Group Office 6.5.44 Group Office Group Office 6.5.45 Group Office Group Office 6.5.46 Group Office Group Office 6.5.47 Group Office Group Office 6.5.48 Group Office Group Office 6.5.49 Group Office Group Office 6.5.50 Group Office Group Office 6.5.51 Group Office Group Office 6.5.52 Group Office Group Office 6.5.53 Group Office Group Office 6.5.54 Group Office Group Office 6.5.55 Group Office Group Office 6.5.56 Group Office Group Office 6.5.57 Group Office Group Office 6.5.58 Group Office Group Office 6.5.59 Group Office Group Office 6.5.60 Group Office Group Office 6.5.61 Group Office Group Office 6.5.62 Group Office Group Office 6.5.63 Group Office Group Office 6.5.64 Group Office Group Office 6.5.65 Group Office Group Office 6.5.66 Group Office Group Office 6.5.67 Group Office Group Office 6.5.68 Group Office Group Office 6.5.69 Group Office Group Office 6.5.70 Group Office Group Office 6.5.71 Group Office Group Office 6.5.72 Group Office Group Office 6.5.73 Group Office Group Office 6.5.74 Group Office Group Office 6.5.75 Group Office Group Office 6.5.76 Group Office Group Office 6.5.77 Group Office Group Office 6.5.78 Group Office Group Office 6.5.79 Group Office Group Office 6.5.80 Group Office Group Office 6.5.81 Group Office Group Office 6.5.82 Group Office Group Office 6.5.83 Group Office Group Office 6.5.84 Group Office Group Office 6.5.85 Group Office Group Office 6.5.86 Group Office Group Office 6.5.88 Group Office Group Office 6.5.89 Group Office Group Office 6.5.90 Group Office Group Office 6.5.91 Group Office Group Office 6.5.92 Group Office Group Office 6.5.93 Group Office Group Office 6.5.94 Group Office Group Office 6.5.95 Group Office Group Office 6.5.96 Group Office Group Office 6.5.97 Group Office Group Office 6.5.98 Group Office Group Office 6.5.99 Group Office Group Office 6.5.100 Group Office Group Office 6.5.101 Group Office Group Office 6.5.102 Group Office Group Office 6.5.103 Group Office Group Office 6.5.104 Group Office Group Office 6.5.105 Group Office Group Office 6.5.106 Group Office Group Office 6.5.107 Group Office Group Office 6.5.108 Group Office Group Office 6.5.109 Group Office Group Office 6.5.110 Group Office Group Office 6.6.25 Group Office Group Office 6.6.26 Group Office Group Office 6.6.27 Group Office Group Office 6.6.28 Group Office Group Office 6.6.29 Group Office Group Office 6.6.30 Group Office Group Office 6.6.31 Group Office Group Office 6.6.32 Group Office Group Office 6.6.33 Group Office Group Office 6.6.34 Group Office Group Office 6.6.35 Group Office Group Office 6.6.36 Group Office Group Office 6.6.37 Group Office Group Office 6.6.38 Group Office Group Office 6.6.39 Group Office Group Office 6.6.40 Group Office Group Office 6.6.41 Group Office Group Office 6.6.42 Group Office Group Office 6.6.43 Group Office Group Office 6.6.44 Group Office Group Office 6.6.45 Group Office Group Office 6.6.46 Group Office Group Office 6.6.47 Group Office Group Office 6.6.48 Group Office Group Office 6.6.49 Group Office Group Office 6.6.50 Group Office Group Office 6.6.51 Group Office Group Office 6.6.52 Group Office Group Office 6.6.53 Group Office Group Office 6.6.54 Group Office Group Office 6.6.55 Group Office Group Office 6.6.56 Group Office Group Office 6.6.57 Group Office Group Office 6.6.58 Group Office Group Office 6.6.59 Group Office Group Office 6.6.60 Group Office Group Office 6.6.61 Group Office Group Office 6.6.62 Group Office Group Office 6.6.63 Group Office Group Office 6.6.64 Group Office Group Office 6.6.65 Group Office Group Office 6.6.66 Group Office Group Office 6.6.67 Group Office Group Office 6.6.68 Group Office Group Office 6.6.69 Group Office Group Office 6.6.70 Group Office Group Office 6.6.71 Group Office Group Office 6.6.72 Group Office Group Office 6.6.73 Group Office Group Office 6.6.74 Group Office Group Office 6.6.75 Group Office Group Office 6.6.76 Group Office Group Office 6.6.77 Group Office Group Office 6.6.78 Group Office Group Office 6.6.79 Group Office Group Office 6.6.80 Group Office Group Office 6.6.81 Group Office Group Office 6.6.82 Group Office Group Office 6.6.83 Group Office Group Office 6.6.84 Group Office Group Office 6.6.85 Group Office Group Office 6.6.86 Group Office Group Office 6.6.87 Group Office Group Office 6.6.88 Group Office Group Office 6.6.89 Group Office Group Office 6.6.90 Group Office Group Office 6.6.91 Group Office Group Office 6.6.92 Group Office Group Office 6.6.93 Group Office Group Office 6.6.94 Group Office Group Office 6.6.95 Group Office Group Office 6.6.96 Group Office Group Office 6.6.97 Group Office Group Office 6.6.98 Group Office Group Office 6.6.99 Group Office Group Office 6.6.100 Group Office Group Office 6.6.101 Group Office Group Office 6.6.102 Group Office Group Office 6.6.103 Group Office Group Office 6.6.104 Group Office Group Office 6.6.105 Group Office Group Office 6.6.106 Group Office Group Office 6.6.107 Group Office Group Office 6.6.108 Group Office Group Office 6.6.109 Group Office Group Office 6.6.110 Group Office Group Office 6.6.111 Group Office Group Office 6.6.112 Group Office Group Office 6.6.113 Group Office Group Office 6.6.114 Group Office Group Office 6.6.115 Group Office Group Office 6.6.116 Group Office Group Office 6.6.117 Group Office Group Office 6.6.118 Group Office Group Office 6.6.119 Group Office Group Office 6.6.120 Group Office Group Office 6.6.121 Group Office Group Office 6.6.122 Group Office Group Office 6.6.123 Group Office Group Office 6.6.124 Group Office Group Office 6.6.125 Group Office Group Office 6.6.126 Group Office Group Office 6.6.127 Group Office Group Office 6.6.128 Group Office Group Office 6.6.129 Group Office Group Office 6.6.130 Group Office Group Office 6.6.131 Group Office Group Office 6.6.132 Group Office Group Office 6.6.133 Group Office Group Office 6.6.134 Group Office Group Office 6.6.135 Group Office Group Office 6.6.136 Group Office Group Office 6.6.137 Group Office Group Office 6.6.138 Group Office Group Office 6.6.139 Group Office Group Office 6.6.140 Group Office Group Office 6.6.141 Group Office Group Office 6.6.142 Group Office Group Office 6.6.143 Group Office Group Office 6.6.144 Group Office Group Office 6.6.145 Group Office Group Office 6.6.146 Group Office Group Office 6.6.147 Group Office Group Office 6.6.148 Group Office Group Office 6.6.149 Group Office Group Office 6.6.150 Group Office Group Office 6.6.151 Group Office Group Office 6.6.152 Group Office Group Office 6.6.153 Group Office Group Office 6.6.154 Group Office Group Office 6.6.155 Group Office Group Office 6.6.156 Group Office Group Office 6.6.157 Group Office Group Office 6.6.158 Group Office Group Office 6.6.159 Group Office Group Office 6.6.160 Group Office Group Office 6.6.161 Group Office Group Office 6.6.162 Group Office Group Office 6.6.163 Group Office Group Office 6.6.164 Group Office Group Office 6.6.165 Group Office Group Office 6.6.166 Group Office Group Office 6.6.167 Group Office Group Office 6.6.168 Group Office Group Office 6.6.169 Group Office Group Office 6.6.170 Group Office Group Office 6.6.171 Group Office Group Office 6.6.172 Group Office Group Office 6.6.173 Group Office Group Office 6.6.174 Group Office Group Office 6.6.175 Group Office Group Office 6.6.176	465

Common Weakness Enumeration (CWE)

CWE-918 - Server-Side Request Forgery (SSRF)

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References