Orta CVSS 6.3
CVE-2025-63562: Vacation Rental Management Platform: güvenlik açığı
Açıklama (NVD)
Summer Pearl Group Vacation Rental Management Platform prior to v1.0.2 suffers from insufficient server-side authorization. Authenticated attackers can call several endpoints and perform create/update/delete actions on resources owned by arbitrary users by manipulating request parameters (e.g., owner or resource id).
Özet bilgiler
- Ürün
- Summerpearlgroup Vacation Rental Management Platform
- CVSS v3.1
- 6.3
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L - EPSS
- %0,20 (yüzdelik 9)
- CWE
- CWE-284
- Yama
- Yok / bilinmiyor
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| summerpearlgroup-vacation-rental-management-platform | — | — | 1.0.2 |