https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 22:50:50 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-21851 EUVD-2026-21851 https://cve.radiocsirt.org/vuln/euvd-2026-21851 https://cve.radiocsirt.org/vuln/fkie_cve-2021-20788 <p>Server-side request forgery (SSRF) vulnerability in GroupSession (GroupSession Free edition from ver2.2.0 to the version prior to ver5.1.0, GroupSession byCloud from ver3.0.3 to the version prior to ver5.1.0, and GroupSession ZION from ver3.0.3 to the version prior to ver5.1.0) allows a remote authenticated attacker to conduct a port scan from the product and/or obtain information from the internal Web server.</p> <p>Server-side request forgery (SSRF) vulnerability in GroupSession (GroupSession Free edition from ver2.2.0 to the version prior to ver5.1.0, GroupSession byCloud from ver3.0.3 to the version prior to ver5.1.0, and GroupSession ZION from ver3.0.3 to the version prior to ver5.1.0) allows a remote authenticated attacker to conduct a port scan from the product and/or obtain information from the internal Web server.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-20788 https://cve.radiocsirt.org/vuln/ghsa-jvhx-hc7j-xvxh <p>Server-side request forgery (SSRF) vulnerability in GroupSession (GroupSession Free edition from ver2.2.0 to the version prior to ver5.1.0, GroupSession byCloud from ver3.0.3 to the version prior to ver5.1.0, and GroupSession ZION from ver3.0.3 to the version prior to ver5.1.0) allows a remote authenticated attacker to conduct a port scan from the product and/or obtain information from the internal Web server.</p> <p>Server-side request forgery (SSRF) vulnerability in GroupSession (GroupSession Free edition from ver2.2.0 to the version prior to ver5.1.0, GroupSession byCloud from ver3.0.3 to the version prior to ver5.1.0, and GroupSession ZION from ver3.0.3 to the version prior to ver5.1.0) allows a remote authenticated attacker to conduct a port scan from the product and/or obtain information from the internal Web server.</p> https://cve.radiocsirt.org/vuln/ghsa-jvhx-hc7j-xvxh https://cve.radiocsirt.org/vuln/gsd-2021-20788 gsd-2021-20788 https://cve.radiocsirt.org/vuln/gsd-2021-20788 https://cve.radiocsirt.org/vuln/jvndb-2021-000070 <p>GroupSession provided by Japan Total System Co.,Ltd. contains multiple vulnerabilities listed below. *Cross-site scripting vulnerability (CWE-79) - CVE-2021-20785 *Cross-site request forgery (CWE-352) - CVE-2021-20786 *Cross-site scripting vulnerability (CWE-79) - CVE-2021-20787 *Sever-side request forgery (CWE-918) - CVE-2021-20788 *Open redirect (CWE-601) - CVE-2021-20789 CVE-2021-20785, CVE-2021-20786 ASAI Ken reported these vulnerabilities to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. CVE-2021-20787, CVE-2021-20788, CVE-2021-20789 Ryo Sato of BroadBand Security,Inc. reported these vulnerabilities to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.</p> <p>GroupSession provided by Japan Total System Co.,Ltd. contains multiple vulnerabilities listed below. *Cross-site scripting vulnerability (CWE-79) - CVE-2021-20785 *Cross-site request forgery (CWE-352) - CVE-2021-20786 *Cross-site scripting vulnerability (CWE-79) - CVE-2021-20787 *Sever-side request forgery (CWE-918) - CVE-2021-20788 *Open redirect (CWE-601) - CVE-2021-20789 CVE-2021-20785, CVE-2021-20786 ASAI Ken reported these vulnerabilities to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. CVE-2021-20787, CVE-2021-20788, CVE-2021-20789 Ryo Sato of BroadBand Security,Inc. reported these vulnerabilities to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.</p> https://cve.radiocsirt.org/vuln/jvndb-2021-000070