PT-2025-2067 · Unknown · Singmr Houserent

Lvzc2 · Published 2025-01-09 · Updated 2025-10-15 · CVE-2024-13211

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions SingMR HouseRent version 1.0

Description A critical issue has been found, affecting some unknown functionality of the file src/main/java/com/house/wym/controller/AdminController.java. This leads to improper access controls, and the attack can be launched remotely. The exploit has been disclosed to the public and may be used.

Recommendations For SingMR HouseRent version 1.0, consider restricting access to the AdminController.java file until a patch is available. As a temporary workaround, review and strengthen access controls to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Access Control

Incorrect Privilege Assignment

Weakness Enumeration

CWE-284

CWE-266

Related Identifiers

CVE-2024-13211

Affected Products

Singmr Houserent

References · 10

• 🔥 https://github.com/SingMR/HouseRent/issues/12#issue-2762124045 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2024-13211 · Security Note
• https://github.com/SingMR/HouseRent/issues/12 · Note
• https://vuldb.com/?submit.471427 · Note
• https://t.me/cvenotify/106869 · Telegram Post
• https://t.me/cveNotify/138849 · Telegram Post
• https://vuldb.com/?ctiid.290816 · Note
• https://vuldb.com/?id.290816 · Note
• https://t.me/cvedetector/14771 · Telegram Post
• https://twitter.com/CVEnew/status/1877256328806379791 · Twitter Post