PT-2025-44671 · Summer Pearl · Summer Pearl Group Vacation Rental Management Platform

Published 2025-10-31 · Updated 2025-10-31 · CVE-2025-63562

Positive Technologies (AI Summary)

CVSS v3.1

6.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Summer Pearl Group Vacation Rental Management Platform versions prior to 1.0.2

Description The Summer Pearl Group Vacation Rental Management Platform is affected by inadequate server-side authorization. Authenticated attackers can access and modify resources belonging to other users by manipulating request parameters, such as owner or resource id, within API calls. This allows attackers to perform create, update, and delete operations on resources they should not have access to. The affected API endpoints allow these actions.

Recommendations Versions prior to 1.0.2 should be updated to version 1.0.2 or later.

Fix

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2025-63562

Affected Products

Summer Pearl Group Vacation Rental Management Platform

References · 6

• https://osv.dev/vulnerability/CVE-2025-63562 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-63562 · Security Note
• https://t.me/CVEtracker/36347 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1984382966286389722 · Twitter Post
• https://twitter.com/CVEnew/status/1984354145017434528 · Twitter Post
• https://github.com/Stolichnayer/Summer-Pearl-Group-Broken-Access-Control · Note