PT-2025-44672 · Summer Pearl · Summer Pearl Group Vacation Rental Management Platform

Published 2025-10-31 · Updated 2025-10-31 · CVE-2025-63561

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Summer Pearl Group Vacation Rental Management Platform versions prior to 1.0.2

Description The Summer Pearl Group Vacation Rental Management Platform is affected by a Denial-of-Service (DoS) condition. An attacker can exhaust the server’s connection pool and worker capacity by opening and maintaining numerous slow or partially-completed HTTP connections. This can prevent legitimate users and APIs from accessing the service. The issue resides in the HTTP connection handling layer.

Recommendations Versions prior to 1.0.2 should be updated to version 1.0.2 or later.

Exploit

Fix

DoS

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

CVE-2025-63561

Affected Products

Summer Pearl Group Vacation Rental Management Platform

References · 6

• 🔥 https://github.com/Stolichnayer/Summer-Pearl-Group-Slowloris-DoS · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-63561 · Security Note
• https://osv.dev/vulnerability/CVE-2025-63561 · Vendor Advisory
• https://twitter.com/CVEnew/status/1984354143885004864 · Twitter Post
• https://t.me/CVEtracker/36346 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1984380406414676111 · Twitter Post