CVE-2025-63562
Medium
Description
Summer Pearl Group Vacation Rental Management Platform prior to v1.0.2 suffers from insufficient server-side authorization. Authenticated attackers can call several endpoints and perform create/update/delete actions on resources owned by arbitrary users by manipulating request parameters (e.g., owner or resource id).
SeverityMedium
CVSS6.3
Exploit probability—
ProductSummerpearlgroup Vacation Rental Management Platform
PublishedOct 31, 2025
First seenOct 31, 2025
Weakness typeCWE-284Improper access control
How to fix
Update
- summerpearlgroup vacation_rental_management_platform1.0.2 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| summerpearlgroup vacation_rental_management_platform | v < 1.0.2 | 1.0.2 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.