Grouper

Grouper DONT USE GROUPER ANY MORE. USE GROUPER2! https://github.com/l0ss/Grouper2 A PowerShell script for helping to find vulnerable settings in AD Group Policy. Photo by Jon Hanson - https://www.flickr.com/people/61952179@N00?rb=1 - https://creativecommons.org/licenses/by-sa/2.0/ Summary Grouper...

CVE-2026-103470

In Internet2 Grouper before 7.5.1 in some configurations, a user who is allowed to create or edit rules in the User Interface can escalate privileges...

CVE-2026-103470

In Internet2 Grouper before 7.5.1 in some configurations, a user who is allowed to create or edit rules in the User Interface can escalate privileges...

CVE-2026-103470

In Internet2 Grouper versions prior to 7.5.1 , certain configurations allow a user with permissions to create or edit rules in the User Interface to perform a privilege escalation . While the specific technical root cause is not detailed in the provided documents, the impact is categorized as CRI...

CVE-2026-103470

In Internet2 Grouper before 7.5.1 in some configurations, a user who is allowed to create or edit rules in the User Interface can escalate privileges...

CVE-2026-103470

In Internet2 Grouper before 7.5.1 in some configurations, a user who is allowed to create or edit rules in the User Interface can escalate privileges...

EUVD-2026-90161

In Internet2 Grouper before 7.5.1 in some configurations, a user who is allowed to create or edit rules in the User Interface can escalate privileges...

EUVD-2018-11473

Malware in sbrugna...

EUVD-2025-30217

Malicious code in bioql PyPI...

CVE-2025-59714

In Internet2 Grouper 5.17.1 before 5.20.5, group admins who are not Grouper sysadmins can configure loader jobs...

Incorrect Authorization

Overview edu.internet2.middleware.grouper:grouper is an Internet2 Groups Management Toolkit Affected versions of this package are vulnerable to Incorrect Authorization via improper job scheduling in the loader jobs configuration process. A group administrator who is not a member of the Grouper...

CVE-2025-59714

In Internet2 Grouper 5.17.1 before 5.20.5, group admins who are not Grouper sysadmins can configure loader jobs...

CVE-2025-59714

In Internet2 Grouper 5.17.1 before 5.20.5, group admins who are not Grouper sysadmins can configure loader jobs...

Grouper 安全漏洞

Grouper is an Internet2 open source enterprise access management system designed for highly distributed administrative environments and heterogeneous information technology environments common to colleges and universities. A security vulnerability exists in Grouper versions 5.17.1 through prior t...

CVE-2025-59714: Incorrect Authorization

In Internet2 Grouper 5.17.1 before 5.20.5, group admins who are not Grouper sysadmins can configure loader jobs...

CVE-2025-59714

The CVE-2025-59714 entry concerns Internet2 Grouper. Affected: Grouper versions 5.17.1 up to 5.20.4 (before 5.20.5). Issue: group admins who are not Grouper sysadmins can configure loader jobs, enabling potential unauthorized loader job creation. Root cause: mis-validation/configuration of loader...

PT-2025-38504

Name of the Vulnerable Software and Affected Versions Internet2 Grouper versions 5.17.1 through 5.20.4 Description Group administrators who are not also Grouper system administrators can configure loader jobs. Recommendations Update to a version prior to 5.17.1 or after 5.20.5...

CVE-2025-59714

In Internet2 Grouper 5.17.1 before 5.20.5, group admins who are not Grouper sysadmins can configure loader jobs...

CVE-2025-59714

In Internet2 Grouper 5.17.1 before 5.20.5, group admins who are not Grouper sysadmins can configure loader jobs...

CVE-2024-39848

Internet2 Grouper before 5.6 allows authentication bypass when LDAP authentication is used in certain ways. This is related to internet2.middleware.grouper.ws.security.WsGrouperLdapAuthentication and the use of the UyY29r password for the M3vwHr account. This also affects "Grouper for Web Service...