Medium severity4.3NVD Advisory· Published Dec 12, 2025· Updated Jun 17, 2026
CVE-2025-58576
CVE-2025-58576
Description
Cross-site request forgery vulnerability exists in GroupSession Free edition prior to ver5.3.0, GroupSession byCloud prior to ver5.3.3, and GroupSession ZION prior to ver5.3.2. If a user accesses a malicious page while logged in, unintended operations may be performed.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
9cpe:2.3:a:groupsession:groupsession:*:*:*:*:free:*:*:*+ 4 more
- cpe:2.3:a:groupsession:groupsession:*:*:*:*:free:*:*:*range: <5.3.0
- cpe:2.3:a:groupsession:groupsession:*:*:*:*:zion:*:*:*range: <5.3.2
- cpe:2.3:a:groupsession:groupsession:*:*:*:*:bycloud:*:*:*range: <5.3.3
- (no CPE)range: prior to ver5.3.3
- (no CPE)range: prior to ver5.3.2
prior to ver5.3.0+ 1 more
- (no CPE)range: prior to ver5.3.0
- (no CPE)range: <5.3.0
- Range: <5.3.2
- Range: <5.3.3
Patches
Vulnerability mechanics
References
2- groupsession.jp/info/info-news/security20251208nvdVendor Advisory
- jvn.jp/en/jp/JVN19940619/nvdThird Party Advisory
News mentions
0No linked articles in our index yet.