PT-2025-22926 · Unknown · Summer Pearl Group Vacation Rental Management Platform

Alexandros Perrakis + 1 · Published 2025-05-26 · Updated 2025-12-17 · CVE-2025-5184

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Summer Pearl Group Vacation Rental Management Platform versions up to 1.0.1

Description A vulnerability was found in the HTTP Response Header Handler component of the Summer Pearl Group Vacation Rental Management Platform, leading to information disclosure. The manipulation can be launched remotely.

Recommendations For Summer Pearl Group Vacation Rental Management Platform versions up to 1.0.1, upgrade to version 1.0.2 to address this issue.

Fix

Improper Access Control

Information Disclosure

Weakness Enumeration

CWE-284

CWE-200

Related Identifiers

CVE-2025-5184

Affected Products

Summer Pearl Group Vacation Rental Management Platform

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2025-5184 · Security Note
• https://summerpearlgroup.gr/spgpm/releases · Patch
• https://osv.dev/vulnerability/CVE-2025-5184 · Vendor Advisory
• https://twitter.com/aabhishekgn/status/2001117129140289941 · Twitter Post
• https://vuldb.com/?id.310272 · Note
• https://t.me/cvetracker/24643 · Telegram Post
• https://twitter.com/CVEnew/status/1926988263044067537 · Twitter Post
• https://vuldb.com/?ctiid.310272 · Note