CVE-2025-61950 | BDVDB-2026-305779 Detail

Description#

In GroupSession, a Circular notice can be created with its memo field non-editable, but the authorization check is improperly implemented. With some crafted request, a logged-in user may alter the memo field. The affected products and versions are GroupSession Free edition prior to ver5.3.0, GroupSession byCloud prior to ver5.3.3, and GroupSession ZION prior to ver5.3.2.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12025-12-12Record published in the CVE List.