VULNERABILITY INTELLIGENCE

CVE-2021-20876

CVSS score6.8 MEDIUM

EPSS probability1.06%

CISA KEVNot currently listed

Published2021-12-24

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N

Description

Path traversal vulnerability in GroupSession Free edition ver5.1.1 and earlier, GroupSession byCloud ver5.1.1 and earlier, and GroupSession ZION ver5.1.1 and earlier allows an attacker with an administrative privilege to obtain sensitive information stored in the hierarchy above the directory on the published site's server via unspecified vectors.

Weakness classification

nvd@nist.gov: CWE-22

Primary references

vultures@jpcert.or.jp — Vendor Advisory
vultures@jpcert.or.jp — Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory