CVE-2025-61987

CVE-2025-61987 affects GroupSession variants: Free edition prior to 5.3.0, byCloud prior to 5.3.3, and ZION prior to 5.3.2. The root cause is lack of origin validation in WebSockets, which may allow exposure of chat information to users accessing crafted pages. Affected software is GroupSession (...

PT-2025-50878

Name of the Vulnerable Software and Affected Versions GroupSession versions prior to 5.7.1 Description The software’s initial configuration may have the "External page display restriction" set to "Do not limit". This configuration allows a user to be redirected to an arbitrary website when...