VULNERABILITY INTELLIGENCE

CVE-2025-62192

CVSS score5.4 MEDIUM
EPSS probability0.19%
CISA KEVNot currently listed
Published2025-12-12
Last modified2026-10-07
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Description

SQL Injection vulnerability exists in GroupSession Free edition prior to ver5.3.0, GroupSession byCloud prior to ver5.3.3, and GroupSession ZION prior to ver5.3.2. If exploited, information stored in the database may be obtained or altered by an authenticated user.

Weakness classification

  • vultures@jpcert.or.jp: CWE-89

Primary references