Vulnerabilidades do MicroRealEstate MicroRealEstate
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam MicroRealEstate MicroRealEstate: 5 registro(s), com versões afetadas e correções.
CVE-2026-57871
Alta · 7.1
CWE-23 07/07/2026
Relative Path Traversal em MicroRealEstate
Relative path traversal vulnerability in MicroRealEstate file upload functionality allows attackers to potentially overwrite system files.
This issue affects MicroRealEstate: through 1.0.0-alpha3.
CVE-2026-57870
Média · 5.3
CWE-639 07/07/2026
Authorization Bypass Through User-Controlled Key (IDOR) em MicroRealEstate
Broken object-level access control on the Template API in MicroRealEstate allows attackers to retrieve document templates used by other organizations without authorization.
This issue affects MicroRealEstate: through 1.0.0-alpha3.
CVE-2026-57869
Alta · 7.1
CWE-639 07/07/2026
Authorization Bypass Through User-Controlled Key (IDOR) em MicroRealEstate
Broken object-level access controls and the use of a deterministic pattern during random ID generation in MicroRealEstate allows attackers to access documents uploaded by landlords or tenants without authorization.
This issue affects MicroRealEstate: through 1.0.0-alpha3.
CVE-2026-57868
Alta · 7.1
CWE-639 07/07/2026
Authorization Bypass Through User-Controlled Key (IDOR) em MicroRealEstate
MicroRealEstate is affected by broken object-level access controls in PDF generator functionality.
This issue affects MicroRealEstate: through 1.0.0-alpha3.
CVE-2026-57867
Alta · 8.8
CWE-288 07/07/2026
Authentication Bypass Using an Alternate Path or Channel em MicroRealEstate
MicroRealEstate allows adversaries to bypass authentication due to a lack of token state management. This would permit adversaries targeting MicroRealEstate deployments to brute-force One-Time Passwords (OTP) to log in as any user. This issue affects MicroRealEstate: through 1.0.0-alpha3.