CVE-2021-20876

Name of the Vulnerable Software and Affected Versions: GroupSession Free edition versions 5.1.1 and earlier GroupSession byCloud versions 5.1.1 and earlier GroupSession ZION versions 5.1.1 and earlier

Description: A path traversal vulnerability allows an attacker with administrative privilege to obtain sensitive information stored in the hierarchy above the directory on the published site's server via unspecified vectors.

Recommendations: For GroupSession Free edition versions 5.1.1 and earlier, update to a version later than 5.1.1 to resolve the issue. For GroupSession byCloud versions 5.1.1 and earlier, update to a version later than 5.1.1 to resolve the issue. For GroupSession ZION versions 5.1.1 and earlier, update to a version later than 5.1.1 to resolve the issue. As a temporary workaround, consider restricting access to sensitive information stored on the server to minimize the risk of exploitation.