Approved changes feed: RSS · Atom

cpe:2.3:a:japan_total_system_co.,ltd.:groupsession_free_edition,_groupsession_bycloud,_groupsession_zion:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorJapan Total System Co.,Ltd. (afc81f58-a8a7-52ff-b030-d6969e67ed1e)
ProductGroupsession Free Edition, Groupsession Bycloud, Groupsession Zion (7f2bd481-f24e-51d3-ab28-0e83d68b6bba)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-20876 vulnerable 2026-06-08 05:29:10.917258 Details available
Path traversal vulnerability in GroupSession Free edition ver5.1.1 and earlier, GroupSession byCloud ver5.1.1 and earlier, and GroupSession ZION ver5.1.1 and earlier allows an attacker with an administrative privilege to obtain sensitive information stored in the hierarchy above the directory on the published site's server via unspecified vectors.
Published: 2021-12-24T06:30:32.000Z
Updated: 2024-08-03T17:53:23.073Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20875 vulnerable 2026-06-08 05:29:10.916840 Details available
Open redirect vulnerability in GroupSession Free edition ver5.1.1 and earlier, GroupSession byCloud ver5.1.1 and earlier, and GroupSession ZION ver5.1.1 and earlier allows a remote unauthenticated attacker to redirect users to arbitrary web sites and conduct phishing attacks by having a user to access a specially crafted URL.
Published: 2021-12-24T06:30:30.000Z
Updated: 2024-08-03T17:53:23.086Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20874 vulnerable 2026-06-08 05:29:10.914710 Details available
Incorrect permission assignment for critical resource vulnerability in GroupSession Free edition ver5.1.1 and earlier, GroupSession byCloud ver5.1.1 and earlier, and GroupSession ZION ver5.1.1 and earlier allows a remote unauthenticated attacker to access arbitrary files on the server and obtain sensitive information via unspecified vectors.
Published: 2021-12-24T06:30:29.000Z
Updated: 2024-08-03T17:53:23.075Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.