Vulnerabilidades de Summerpearlgroup
CVEs publicadas que afetam produtos de Summerpearlgroup: 3 registro(s), com severidade, exploração e correções.
CVE-2025-63563
Média · 6.5
CWE-286 31/10/2025
Summer Pearl Group Vacation Rental Management Platform prior to v1.0.2 does not properly…
Summer Pearl Group Vacation Rental Management Platform prior to v1.0.2 does not properly invalidate active user sessions after a password change. This allows an attacker with a valid session token to maintain access to the account even after the legitimate user changes their password.
CVE-2025-63562
Média · 6.3
CWE-284 31/10/2025
Improper Access Control em Summerpearlgroup Vacation Rental Management Platform
Summer Pearl Group Vacation Rental Management Platform prior to v1.0.2 suffers from insufficient server-side authorization. Authenticated attackers can call several endpoints and perform create/update/delete actions on resources owned by arbitrary users by manipulating request parameters (e.g., owner or resource id).
CVE-2025-63561
Alta · 7.5
CWE-400 31/10/2025
Uncontrolled Resource Consumption em Summerpearlgroup Vacation Rental Management Platform
Summer Pearl Group Vacation Rental Management Platform prior to 1.0.2 is susceptible to a Slowloris-style Denial-of-Service (DoS) condition in the HTTP connection handling layer, where an attacker that opens and maintains many slow or partially-completed HTTP connections can exhaust the server’s connection pool and worker capacity, preventing legitimate users and APIs from accessing the service.