Security Advisory

CVE-2025-58576

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2025-12-12 05:02:30
Last updated 2025-12-12 20:23:14
Assigner jpcert
CVSS score 4.3
State PUBLISHED

Description

Cross-site request forgery vulnerability exists in GroupSession Free edition prior to ver5.3.0, GroupSession byCloud prior to ver5.3.3, and GroupSession ZION prior to ver5.3.2. If a user accesses a malicious page while logged in, unintended operations may be performed.