Open Redirect Vulnerability in GroupSession by GroupSession
CVE-2017-2166

6.1MEDIUM

Key Information:

Vendor

Japan Total System Co.,ltd.

Status
Groupsession
Vendor
CVE Published:
26 January 2018

What is CVE-2017-2166?

The open redirect vulnerability in GroupSession versions prior to 4.7.0 allows attackers to redirect users to potentially malicious websites. By exploiting this flaw, an attacker can conduct phishing campaigns through unspecified methods, jeopardizing the security and confidentiality of users' information.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

GroupSession version 4.7.0 and earlier

References

https://jvn.jp/en/jp/JVN26200083/index.html
third-party-advisoryx_refsource_JVN

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.