PT-2021-14241

Name of the Vulnerable Software and Affected Versions: GroupSession Free edition versions 2.2.0 through 5.0.x GroupSession byCloud versions 3.0.3 through 5.0.x GroupSession ZION versions 3.0.3 through 5.0.x Description: A cross-site request forgery issue allows a remote attacker to hijack the...

PT-2021-14244

Name of the Vulnerable Software and Affected Versions: GroupSession Free edition versions 2.2.0 through 5.1.0 GroupSession byCloud versions 3.0.3 through 5.1.0 GroupSession ZION versions 3.0.3 through 5.1.0 Description: The issue allows a remote attacker to redirect a user to an arbitrary web sit...

PT-2021-14240

Name of the Vulnerable Software and Affected Versions: GroupSession Free edition versions 2.2.0 through 5.1.0 GroupSession byCloud versions 3.0.3 through 5.1.0 GroupSession ZION versions 3.0.3 through 5.1.0 Description: A cross-site scripting issue allows a remote attacker to inject an arbitrary...

CVE-2021-20785: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability in GroupSession GroupSession Free edition from ver2.2.0 to the version prior to ver5.1.0, GroupSession byCloud from ver3.0.3 to the version prior to ver5.1.0, and GroupSession ZION from ver3.0.3 to the version prior to ver5.1.0 allows a remote attacker to inject...

PT-2021-14242

Name of the Vulnerable Software and Affected Versions: GroupSession Free edition versions 2.2.0 through 5.0.x GroupSession byCloud versions 3.0.3 through 5.0.x GroupSession ZION versions 3.0.3 through 5.0.x Description: A cross-site scripting issue allows a remote attacker to inject an arbitrary...

Multiple vulnerabilities in GroupSession

Overview GroupSession provided by Japan Total System Co.,Ltd. contains multiple vulnerabilities listed below. Cross-site scripting vulnerability CWE-79 - CVE-2021-20785 Cross-site request forgery CWE-352 - CVE-2021-20786 Cross-site scripting vulnerability CWE-79 - CVE-2021-20787 Sever-side reques...

Japan Total System GroupSession 跨站脚本漏洞

Japan Total System GroupSession is a groupware project from Japan Total System, Inc. that facilitates business and organizational communication and is designed to promote information sharing. A cross-site scripting vulnerability exists in Total System GroupSession, which can be triggered by an...

Japan Total System GroupSession 跨站请求伪造漏洞

Japan Total System GroupSession is a groupware project from Japan Total System, Inc. that facilitates business and organizational communication and is designed to promote information sharing. A cross-site request forgery vulnerability exists in Total System GroupSession, where product settings...

Japan Total System GroupSession 代码问题漏洞

Japan Total System GroupSession is a groupware project from Japan Total System, Inc. that facilitates business and organizational communication and is designed to promote information sharing. Total System GroupSession is vulnerable to a code issue that could allow a user with access to the softwa...

Japan Total System GroupSession 输入验证错误漏洞

Japan Total System GroupSession is a groupware project from Japan Total System, Inc. that facilitates business and organizational communication and is designed to promote information sharing. An input validation error vulnerability exists in Total System GroupSession that could allow a remote...

JVN#86026700: Multiple vulnerabilities in GroupSession

GroupSession provided by Japan Total System Co.,Ltd. contains multiple vulnerabilities listed below. Cross-site scripting vulnerability CWE-79 - CVE-2021-20785 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N| Base Score: 6.1 CVSS v2|...

CVE-2017-2166

Open redirect vulnerability in GroupSession version 4.7.0 and earlier allows an attacker to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors...

Open redirect

Open redirect vulnerability in GroupSession version 4.7.0 and earlier allows an attacker to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors...

CVE-2017-2166

Open redirect vulnerability in GroupSession version 4.7.0 and earlier allows an attacker to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors...

CVE-2017-2166

Open redirect vulnerability in GroupSession version 4.7.0 and earlier allows an attacker to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors...

CVE-2017-2166

CVE-2017-2166 is an open redirect vulnerability in GroupSession (Japan Total System Co., Ltd. GroupSession) affecting version 4.7.0 and earlier. The root cause is an open redirect (CWE-601) that could allow an attacker to redirect users to arbitrary websites, potentially enabling phishing. The is...

CVE-2017-2166: URL Redirection to Untrusted Site

Open redirect vulnerability in GroupSession version 4.7.0 and earlier allows an attacker to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors...

PT-2018-7106

Name of the Vulnerable Software and Affected Versions: GroupSession versions 4.7.0 and earlier Description: The issue allows an attacker to redirect users to arbitrary web sites, potentially conducting phishing attacks. Recommendations: For versions 4.7.0 and earlier, update to a version later th...

Japan Total System GroupSession Open Redirect Vulnerability

Japan Total System GroupSession is a groupware project by Japan Total System JTS to facilitate communication among companies and organizations, aiming to promote information sharing. An open redirection vulnerability exists in Japan Total System GroupSession 4.7.0 and earlier versions. An attacke...

GroupSession vulnerable to open redirect

Overview GroupSession provided by Japan Total System Co.,Ltd. is an open source groupware. GroupSession contains an open redirect vulnerability CWE-601. Norihiko Hirukawa of FiveDrive Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Earl...