JVN#26200083: GroupSession vulnerable to open redirect

GroupSession provided by Japan Total System Co.,Ltd. is an open source groupware. GroupSession contains an open redirect vulnerability (CWE-601).

Impact

When accessing a specially crafted page, the user may be redirected to an arbitrary website. As a result, the user may become a victim of a phishing attack.

Solution

Update the Software
Update to the latest version according to the information provided by the developer.

Apply a Workaround
The following workaround may mitigate the effects of this vulnerability.

• Do not access suspicious websites or hyperlinks

Products Affected

• GroupSession version 4.7.0 and earlier