Vacation Rental Management Platform
Approved changes feed: RSS · Atom
cpe:2.3:a:summerpearlgroup:vacation_rental_management_platform:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Summerpearlgroup (36a80a94-1f8a-5341-ba4f-58495f007a07) |
|---|---|
| Product | Vacation Rental Management Platform (8d467df8-7767-5aa7-aa36-3736a4cbba1e) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-63563 |
vulnerable | 2026-06-08 07:39:17.666013 |
Details available
Summer Pearl Group Vacation Rental Management Platform prior to v1.0.2 does not properly invalidate active user sessions after a password change. This allows an attacker with a valid session token to maintain access to the account even after the legitimate user changes their password.
Published: 2025-10-31T00:00:00.000Z
Updated: 2025-11-03T20:44:50.827Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-63562 |
vulnerable | 2026-06-08 07:39:17.665622 |
Details available
MEDIUM (6.3)
Summer Pearl Group Vacation Rental Management Platform prior to v1.0.2 suffers from insufficient server-side authorization. Authenticated attackers can call several endpoints and perform create/update/delete actions on resources owned by arbitrary users by manipulating request parameters (e.g., owner or resource id).
Published: 2025-10-31T00:00:00.000Z
Updated: 2025-10-31T19:59:16.652Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-63561 |
vulnerable | 2026-06-08 07:39:17.665274 |
Details available
HIGH (7.5)
Summer Pearl Group Vacation Rental Management Platform prior to 1.0.2 is susceptible to a Slowloris-style Denial-of-Service (DoS) condition in the HTTP connection handling layer, where an attacker that opens and maintains many slow or partially-completed HTTP connections can exhaust the server’s connection pool and worker capacity, preventing legitimate users and APIs from accessing the service.
Published: 2025-10-31T00:00:00.000Z
Updated: 2025-10-31T20:08:45.140Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-5184 |
vulnerable | 2026-06-08 07:35:24.336812 |
Summer Pearl Group Vacation Rental Management Platform HTTP Response Header information disclosure
MEDIUM (4.3)
A vulnerability was found in Summer Pearl Group Vacation Rental Management Platform up to 1.0.1. It has been classified as problematic. Affected is an unknown function of the component HTTP Response Header Handler. The manipulation leads to information disclosure. It is possible to launch the attack remotely. Upgrading to version 1.0.2 is able to address this issue. It is recommended to upgrade the affected component.
Published: 2025-05-26T12:00:11.846Z
Updated: 2025-05-28T17:35:28.281Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-5183 |
vulnerable | 2026-06-08 07:35:24.336184 |
Summer Pearl Group Vacation Rental Management Platform Header redirect
LOW (3.5)
A vulnerability was found in Summer Pearl Group Vacation Rental Management Platform up to 1.0.1 and classified as problematic. This issue affects some unknown processing of the component Header Handler. The manipulation of the argument Host leads to open redirect. The attack may be initiated remotely. Upgrading to version 1.0.2 is able to address this issue. It is recommended to upgrade the affected component.
Published: 2025-05-26T11:31:04.460Z
Updated: 2025-05-28T17:35:33.960Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-5182 |
vulnerable | 2026-06-08 07:35:24.335803 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-5181 |
vulnerable | 2026-06-08 07:35:24.335305 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.