CVE-2025-5182

Katalog CVE

CVSS 7.5 · High EPSS 0,41%

Kerentanan Improper Authorization pada summerpearlgroup vacation rental management platform. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

A vulnerability has been found in Summer Pearl Group Vacation Rental Management Platform up to 1.0.1 and classified as critical. This vulnerability affects unknown code of the component Listing Handler. The manipulation leads to authorization bypass. The attack can be initiated remotely. Upgrading to version 1.0.2 is able to address this issue. It is recommended to upgrade the affected component.

Rincian

Terbit di NVD

26 Mei 2025

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-285: Improper Authorization
CWE-639: Authorization Bypass Through User-Controlled Key

EPSS (30 hari)

0,41% peluang dieksploitasi; lebih tinggi dari 33,7% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://vuldb.com/?id.310270 advisory pihak ketiga · vdb entry
• https://www.youtube.com/watch?v=0wwuatTa6sU exploit
• https://github.com/Stolichnayer/Summer-Pearl-Group-IDOR-XSS not applicable
• https://summerpearlgroup.gr/spgpm/releases release notes
• https://vuldb.com/?ctiid.310270 permissions required · vdb entry