PT-2025-44673 · Summer Pearl · Summer Pearl Group Vacation Rental Management Platform

Published 2025-10-31 · Updated 2025-11-01 · CVE-2025-63563

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L

Name of the Vulnerable Software and Affected Versions Summer Pearl Group Vacation Rental Management Platform versions prior to 1.0.2

Description The Summer Pearl Group Vacation Rental Management Platform does not invalidate active user sessions after a password change. This allows an attacker possessing a valid session token to retain account access even after the legitimate user modifies their password.

Recommendations Update to version 1.0.2 or later.

Fix

Weakness Enumeration

CWE-286

Related Identifiers

CVE-2025-63563

Affected Products

Summer Pearl Group Vacation Rental Management Platform

References · 6

• https://osv.dev/vulnerability/CVE-2025-63563 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-63563 · Security Note
• https://github.com/Stolichnayer/Summer-Pearl-Group-Insufficient-Session-Expiration · Note
• https://twitter.com/VulmonFeeds/status/1984377846551269627 · Twitter Post
• https://t.me/CVEtracker/36348 · Telegram Post
• https://twitter.com/CVEnew/status/1984359859786072085 · Twitter Post