CVE-2025-63406

n/a / n/a PUBLISHED

Description (CNA)

An issue in Intermesh BV GroupOffice vulnerable before v.25.0.47 and 6.8.136 allows a remote attacker to execute arbitrary code via the dbToApi() and eval() in the FunctionField.php

Affected (CNA)

Vendor / product	Versions
n/a / n/a	affected n/a

CWE

No CWE identifiers supplied.

References

https://noahheraud.com/posts/CVE-2025-63406/
https://github.com/WinDyAlphA/CVE-2025-63406-PoC

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.