Groupsession Free Edition
Approved changes feed: RSS · Atom
cpe:2.3:a:japan_total_system_co.,ltd.:groupsession_free_edition:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Japan Total System Co.,Ltd. (afc81f58-a8a7-52ff-b030-d6969e67ed1e) |
|---|---|
| Product | Groupsession Free Edition (22a71805-96c9-55de-a645-1ecb278be054) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-66284 |
vulnerable | 2026-06-08 07:41:18.525490 |
Details available
MEDIUM (5.4)
Stored cross-site scripting vulnerabilities exist in GroupSession Free edition prior to ver5.7.1, GroupSession byCloud prior to ver5.7.1, and GroupSession ZION prior to ver5.7.1. A logged-in user can prepare a malicious page or URL, and an arbitrary script may be executed on the web browser when another user accesses it.
Published: 2025-12-12T05:01:37.675Z
Updated: 2025-12-12T18:43:52.015Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-65120 |
vulnerable | 2026-06-08 07:39:20.747994 |
Details available
MEDIUM (6.1)
Reflected cross-site scripting vulnerability exists in GroupSession Free edition prior to ver5.7.1, GroupSession byCloud prior to ver5.7.1, and GroupSession ZION prior to ver5.7.1. If a user accesses a crafted page or URL, an arbitrary script may be executed on the web browser of the user.
Published: 2025-12-12T05:02:03.882Z
Updated: 2025-12-12T18:45:07.474Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-64781 |
vulnerable | 2026-06-08 07:39:20.283368 |
Details available
MEDIUM (4.7)
In GroupSession Free edition prior to ver5.7.1, GroupSession byCloud prior to ver5.7.1, and GroupSession ZION prior to ver5.7.1, "External page display restriction" is set to "Do not limit" in the initial configuration. With this configuration, the user may be redirected to an arbitrary website when accessing a specially crafted URL.
Published: 2025-12-12T05:02:58.824Z
Updated: 2025-12-12T20:26:03.855Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-62192 |
vulnerable | 2026-06-08 07:37:28.771540 |
Details available
MEDIUM (5.4)
SQL Injection vulnerability exists in GroupSession Free edition prior to ver5.3.0, GroupSession byCloud prior to ver5.3.3, and GroupSession ZION prior to ver5.3.2. If exploited, information stored in the database may be obtained or altered by an authenticated user.
Published: 2025-12-12T05:02:38.764Z
Updated: 2025-12-12T20:36:24.896Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-61987 |
vulnerable | 2026-06-08 07:37:28.498345 |
Details available
MEDIUM (5.3)
GroupSession Free edition prior to ver5.3.0, GroupSession byCloud prior to ver5.3.3, and GroupSession ZION prior to ver5.3.2. do not validate origins in WebSockets. If a user accesses a crafted page, Chat information sent to the user may be exposed.
Published: 2025-12-12T05:02:22.443Z
Updated: 2025-12-12T20:22:14.823Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-61950 |
vulnerable | 2026-06-08 07:37:28.402564 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-58576 |
vulnerable | 2026-06-08 07:35:18.816552 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-57883 |
vulnerable | 2026-06-08 07:33:16.303898 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-54407 |
vulnerable | 2026-06-08 07:33:12.550484 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-53523 |
vulnerable | 2026-06-08 07:31:14.663664 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.