CVE-2025-61950
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2025
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
In GroupSession, a Circular notice can be created with its memo field non-editable, but the authorization check is improperly implemented. With some crafted request, a logged-in user may alter the memo field. The affected products and versions are GroupSession Free edition prior to ver5.3.0, GroupSession byCloud prior to ver5.3.3, and GroupSession ZION prior to ver5.3.2.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
GroupSession Free edition
- Vendor
- Japan Total System Co.,Ltd.
- Product
- GroupSession Free edition
- Platforms
- Unknown
- Default status
Unknown
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| prior to ver5.3.0 | affected | Unavailable | Unavailable | Unavailable | None listed |
GroupSession byCloud
- Vendor
- Japan Total System Co.,Ltd.
- Product
- GroupSession byCloud
- Platforms
- Unknown
- Default status
Unknown
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| prior to ver5.3.3 | affected | Unavailable | Unavailable | Unavailable | None listed |
GroupSession ZION
- Vendor
- Japan Total System Co.,Ltd.
- Product
- GroupSession ZION
- Platforms
- Unknown
- Default status
Unknown
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| prior to ver5.3.2 | affected | Unavailable | Unavailable | Unavailable | None listed |