Approved changes feed: RSS · Atom

cpe:2.3:a:japan_total_system_co.,ltd.:groupsession:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorJapan Total System Co.,Ltd. (afc81f58-a8a7-52ff-b030-d6969e67ed1e)
ProductGroupsession (d5ddfbeb-9480-593b-a1ab-d883cbe28fce)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-20789 vulnerable 2026-06-08 05:29:10.560629 Details available
Open redirect vulnerability in GroupSession (GroupSession Free edition from ver2.2.0 to the version prior to ver5.1.0, GroupSession byCloud from ver3.0.3 to the version prior to ver5.1.0, and GroupSession ZION from ver3.0.3 to the version prior to ver5.1.0) allows a remote attacker to redirect a user to an arbitrary web site and conduct a phishing attack via a specially crafted URL.
Published: 2021-07-28T00:45:32.000Z
Updated: 2024-08-03T17:53:22.634Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20788 vulnerable 2026-06-08 05:29:10.560286 Details available
Server-side request forgery (SSRF) vulnerability in GroupSession (GroupSession Free edition from ver2.2.0 to the version prior to ver5.1.0, GroupSession byCloud from ver3.0.3 to the version prior to ver5.1.0, and GroupSession ZION from ver3.0.3 to the version prior to ver5.1.0) allows a remote authenticated attacker to conduct a port scan from the product and/or obtain information from the internal Web server.
Published: 2021-07-28T00:45:31.000Z
Updated: 2024-08-03T17:53:22.474Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20787 vulnerable 2026-06-08 05:29:10.559924 Details available
Cross-site scripting vulnerability in GroupSession (GroupSession Free edition from ver2.2.0 to the version prior to ver5.1.0, GroupSession byCloud from ver3.0.3 to the version prior to ver5.1.0, and GroupSession ZION from ver3.0.3 to the version prior to ver5.1.0) allows a remote attacker to inject an arbitrary script by sending a specially crafted request to a specific URL.
Published: 2021-07-28T00:45:29.000Z
Updated: 2024-08-03T17:53:22.442Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20786 vulnerable 2026-06-08 05:29:10.559537 Details available
Cross-site request forgery (CSRF) vulnerability in GroupSession (GroupSession Free edition from ver2.2.0 to the version prior to ver5.1.0, GroupSession byCloud from ver3.0.3 to the version prior to ver5.1.0, and GroupSession ZION from ver3.0.3 to the version prior to ver5.1.0) allows a remote attacker to hijack the authentication of administrators via a specially crafted URL.
Published: 2021-07-28T00:45:27.000Z
Updated: 2024-08-03T17:53:22.490Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20785 vulnerable 2026-06-08 05:29:10.556802 Details available
Cross-site scripting vulnerability in GroupSession (GroupSession Free edition from ver2.2.0 to the version prior to ver5.1.0, GroupSession byCloud from ver3.0.3 to the version prior to ver5.1.0, and GroupSession ZION from ver3.0.3 to the version prior to ver5.1.0) allows a remote attacker to inject an arbitrary script by sending a specially crafted request to a specific URL.
Published: 2021-07-28T00:45:26.000Z
Updated: 2024-08-03T17:53:22.640Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-2166 vulnerable 2026-06-08 05:09:23.752545 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-2165 vulnerable 2026-06-08 05:09:23.751671 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.