Описание
Summer Pearl Group Vacation Rental Management Platform prior to v1.0.2 suffers from insufficient server-side authorization. Authenticated attackers can call several endpoints and perform create/update/delete actions on resources owned by arbitrary users by manipulating request parameters (e.g., owner or resource id).
Ссылки
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 1.0.2 (исключая)
cpe:2.3:a:summerpearlgroup:vacation_rental_management_platform:*:*:*:*:*:*:*:*
EPSS
Процентиль: 16%
0.00051
Низкий
6.3 Medium
CVSS3
Дефекты
CWE-284
Связанные уязвимости
CVSS3: 6.3
github
3 месяца назад
Summer Pearl Group Vacation Rental Management Platform prior to v1.0.2 suffers from insufficient server-side authorization. Authenticated attackers can call several endpoints and perform create/update/delete actions on resources owned by arbitrary users by manipulating request parameters (e.g., owner or resource id).
EPSS
Процентиль: 16%
0.00051
Низкий
6.3 Medium
CVSS3
Дефекты
CWE-284