MEDIUM🇵🇱 Wersja polska

CVE-2025-5182

CVSS 5.3v4.0pub. 2025-05-26upd. 2025-06-03

A vulnerability has been found in Summer Pearl Group Vacation Rental Management Platform up to 1.0.1 and classified as critical. This vulnerability affects unknown code of the component Listing Handler. The manipulation leads to authorization bypass. The attack can be initiated remotely. Upgrading to version 1.0.2 is able to address this issue. It is recommended to upgrade the affected component.

CVSS Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
  • Summerpearlgroup Vacation Rental Management Platform

    APP
    Summerpearlgroup
    < 1.0.2
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2025-63561HIGH7.5ten sam produkt

Summer Pearl Group Vacation Rental Management Platform prior to 1.0.2 is susceptible to a Slowloris-style Deni...

CVE-2025-63562MEDIUM6.3ten sam produkt

Summer Pearl Group Vacation Rental Management Platform prior to v1.0.2 suffers from insufficient server-side a...

CVE-2025-63563MEDIUM6.5ten sam produkt

Summer Pearl Group Vacation Rental Management Platform prior to v1.0.2 does not properly invalidate active use...

CVE-2025-5181MEDIUM5.1ten sam produkt

A vulnerability, which was classified as problematic, was found in Summer Pearl Group Vacation Rental Manageme...

CVE-2025-5183MEDIUM5.1ten sam produkt

A vulnerability was found in Summer Pearl Group Vacation Rental Management Platform up to 1.0.1 and classified...