Lucene search
JpcertCVELIST:CVE-2021-20788HistoryJul 28, 2021 - 12:45 a.m.
CVE-2021-20788
2021-07-2800:45:31
jpcert
www.cve.org
7
groupsession
ssrf vulnerability
remote attacker
port scan
internal web server
Server-side request forgery (SSRF) vulnerability in GroupSession (GroupSession Free edition from ver2.2.0 to the version prior to ver5.1.0, GroupSession byCloud from ver3.0.3 to the version prior to ver5.1.0, and GroupSession ZION from ver3.0.3 to the version prior to ver5.1.0) allows a remote authenticated attacker to conduct a port scan from the product and/or obtain information from the internal Web server.
CNA Affected
[
{
"product": "GroupSession",
"vendor": "Japan Total System Co.,Ltd.",
"versions": [
{
"status": "affected",
"version": "GroupSession Free edition from ver2.2.0 to the version prior to ver5.1.0, GroupSession byCloud from ver3.0.3 to the version prior to ver5.1.0, and GroupSession ZION from ver3.0.3 to the version prior to ver5.1.0"
}
]
}
]Related
prion
prion
Server side request forgery (ssrf)
2021-07-30 14:15:00
nvd
nvd
CVE-2021-20788
2021-07-30 14:15:14
cve
cve
CVE-2021-20788
2021-07-30 14:15:14
jvn
jvn
JVN#86026700: Multiple vulnerabilities in GroupSession
2021-07-19 00:00:00