CVE-2026-33755

{
  "id": "CVE-2026-33755",
  "sourceIdentifier": "[email protected]",
  "published": "2026-03-27T15:16:57.527",
  "lastModified": "2026-10-26T21:10:00.170",
  "vulnStatus": "Analyzed",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Group-Office is an enterprise customer relationship management and groupware tool. Prior to versions 6.8.158, 25.0.92, and 26.0.17, an authenticated SQL Injection vulnerability in the JMAP `Contact/query` endpoint allows any authenticated user with basic addressbook access to extract arbitrary data from the database — including active session tokens of other users. This enables full account takeover of any user, including the System Administrator, without knowing their password. Versions 6.8.158, 25.0.92, and 26.0.17 fix the issue."
    },
    {
      "lang": "es",
      "value": "Group-Office es una herramienta empresarial de gestión de relaciones con clientes y groupware. Antes de las versiones 6.8.158, 25.0.92 y 26.0.17, una vulnerabilidad de inyección SQL autenticada en el endpoint JMAP ’Contact/query’ permite a cualquier usuario autenticado con acceso básico a la libreta de direcciones extraer datos arbitrarios de la base de datos - incluyendo tokens de sesión activos de otros usuarios. Esto permite la toma de control total de la cuenta de cualquier usuario, incluido el Administrador del Sistema, sin conocer su contraseña. Las versiones 6.8.158, 25.0.92 y 26.0.17 solucionan el problema."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "Intermesh",
          "product": "groupoffice",
          "versions": [
            {
              "version": "< 6.8.158",
              "status": "affected"
            },
            {
              "version": "< 25.0.92",
              "status": "affected"
            },
            {
              "version": "< 26.0.17",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "[email protected]",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "baseScore": 8.8,
          "baseSeverity": "HIGH",
          "attackVector": "NETWORK",
          "attackComplexity": "LOW",
          "privilegesRequired": "LOW",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "availabilityImpact": "HIGH"
        },
        "exploitabilityScore": 2.8,
        "impactScore": 5.9
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-03-27T17:23:14.328861Z",
          "id": "CVE-2026-33755",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-89"
        }
      ]
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:intermesh:group-office:*:*:*:*:*:*:*:*",
              "versionEndExcluding": "6.8.158",
              "matchCriteriaId": "40BD9AB8-AC8D-4928-9DAB-15A33BBE5AAE"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:intermesh:group-office:*:*:*:*:*:*:*:*",
              "versionStartIncluding": "25.0.1",
              "versionEndExcluding": "25.0.92",
              "matchCriteriaId": "748DBF3E-60C2-41BA-843A-FA2831109D31"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:intermesh:group-office:*:*:*:*:*:*:*:*",
              "versionStartIncluding": "26.0.1",
              "versionEndExcluding": "26.0.17",
              "matchCriteriaId": "D973CC63-2DD1-4328-B099-BFD723BF048C"
            }
          ]
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://github.com/Intermesh/groupoffice/security/advisories/GHSA-3gc4-5993-c2qc",
      "source": "[email protected]",
      "tags": [
        "Exploit",
        "Vendor Advisory"
      ]
    }
  ]
}