CVE-2025-5183

LOW

Summer Pearl Group Vacation Rental Management Platform < 1.0.2 - Open Redirect via Host Header

Title source: llm
STIX 2.1

Description

A vulnerability was found in Summer Pearl Group Vacation Rental Management Platform up to 1.0.1 and classified as problematic. This issue affects some unknown processing of the component Header Handler. The manipulation of the argument Host leads to open redirect. The attack may be initiated remotely. Upgrading to version 1.0.2 is able to address this issue. It is recommended to upgrade the affected component.

References (3)

Core 3
Core References
Third Party Advisory, VDB Entry vdb-entry technical-description
https://vuldb.com/?id.310271
Permissions Required, VDB Entry signature permissions-required
https://vuldb.com/?ctiid.310271

Scores

CVSS v3 3.5
EPSS 0.0024
EPSS Percentile 14.6%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-601
Status published
Products (1)
summerpearlgroup/vacation_rental_management_platform < 1.0.2
Published May 26, 2025
Tracked Since Feb 18, 2026