GroupSession Cross-Site Request Forgery Vulnerability

A cross-site request forgery (CSRF) vulnerability exists in GroupSession Free edition prior to 5.3.0, GroupSession byCloud prior to 5.3.3, and GroupSession ZION prior to 5.3.2. This vulnerability allows unintended operations to be performed if a user accesses a malicious page while logged in.

Impact

Exploitation of this vulnerability could lead to unauthorized actions being performed on behalf of the user.

Remediation

Users are advised to update to the latest version of GroupSession. The latest version can be downloaded from the GroupSession website. For byCloud users, the update has already been applied.