| Package | Affected versions | Patched versions |
|---|---|---|
| groove workspace | ≤ 2.5n_build_1871 | |
| virtual office | ≤ 3.1_build_2338≤ 3.1a_build_2364 |
Groove Virtual Office before 3.1 build 2338, before 3.1a build 2364, and Groove Workspace before 2.5n build 1871 does not properly display file extensions on attached or embedded files in a compound document, which may allow remote attackers to trick users into executing malicious code.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free