CVE-2017-2165: Groupsession

Medium severity, CVSS 6.5. EPSS: 1.3% chance of exploitation in the next 30 days.

GroupSession versions 4.6.4 and earlier allows remote authenticated attackers to bypass access restrictions to obtain sensitive information such as emails via unspecified vectors.

Affected products

• Groupsession Groupsession: up to and including 4.6.4

Published 2017-06-09. Last modified 2026-06-17.