Orta CVSS 6.5
CVE-2025-63563: Vacation Rental Management Platform: güvenlik açığı
Açıklama (NVD)
Summer Pearl Group Vacation Rental Management Platform prior to v1.0.2 does not properly invalidate active user sessions after a password change. This allows an attacker with a valid session token to maintain access to the account even after the legitimate user changes their password.
Özet bilgiler
- Ürün
- Summerpearlgroup Vacation Rental Management Platform
- CVSS v3.1
- 6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L - EPSS
- %0,27 (yüzdelik 19)
- CWE
- CWE-286
- Yama
- Yok / bilinmiyor
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| summerpearlgroup-vacation-rental-management-platform | — | — | 1.0.2 |