GroupSession SQL Injection Vulnerability

A SQL injection vulnerability has been identified in GroupSession Free edition prior to 5.3.0, GroupSession byCloud prior to 5.3.3, and GroupSession ZION prior to 5.3.2. This vulnerability allows an authenticated user to access or modify information stored in the database.

Impact

Exploitation of this vulnerability could lead to unauthorized access or alteration of database information by an authenticated user.

Remediation

Users are advised to update GroupSession to the latest version. The latest version of GroupSession Free edition can be downloaded from the GroupSession website. GroupSession byCloud has already been updated.