PT-2025-22927 · Unknown · Summer Pearl Group Vacation Rental Management Platform

Alexandros Perrakis + 1 · Published 2025-05-26 · Updated 2025-05-26 · CVE-2025-5185

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Summer Pearl Group Vacation Rental Management Platform versions up to 1.0.1

Description A vulnerability was found in the Summer Pearl Group Vacation Rental Management Platform, affecting an unknown functionality and leading to cross-site request forgery. The attack can be launched remotely.

Recommendations For Summer Pearl Group Vacation Rental Management Platform versions up to 1.0.1, upgrade to version 1.0.2 to address this issue.

Fix

Missing Authorization

CSRF

Weakness Enumeration

CWE-862

CWE-352

Related Identifiers

CVE-2025-5185

Affected Products

Summer Pearl Group Vacation Rental Management Platform

References · 5

• https://summerpearlgroup.gr/spgpm/releases · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2025-5185 · Security Note
• https://vuldb.com/?ctiid.310273 · Note
• https://t.me/cvetracker/24652 · Telegram Post
• https://vuldb.com/?id.310273 · Note