CVE-2020-5539: Grandit

Medium severity, CVSS 6.5. EPSS: 0.8% chance of exploitation in the next 30 days.

GRANDIT Ver.1.6, Ver.2.0, Ver.2.1, Ver.2.2, Ver.2.3, and Ver.3.0 do not properly manage sessions, which allows remote attackers to impersonate an arbitrary user and then alter or disclose the information via unspecified vectors.

Affected products

• Grandit Grandit: version 1.6 only; version 2.0 only; version 2.1 only; version 2.2 only; version 2.3 only; version 3.0 only

Published 2020-03-02. Last modified 2026-06-17.