CVE-2025-5183: Summer Pearl Group Vacation Rental Management Platform Header redirect

Severity: medium (CVSS 4.7 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-05-26 · updated 2026-06-17
Weakness: CWE-601

Description

A vulnerability was found in Summer Pearl Group Vacation Rental Management Platform up to 1.0.1 and classified as problematic. This issue affects some unknown processing of the component Header Handler. The manipulation of the argument Host leads to open redirect. The attack may be initiated remotely. Upgrading to version 1.0.2 is able to address this issue. It is recommended to upgrade the affected component.

Affected products

Summer Pearl Group Vacation Rental Management Platform: before 1.0.2 — fixed in 1.0.2

How to fix

Upgrade to a fixed version: Summer Pearl Group Vacation Rental Management Platform 1.0.2. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2025-5183 or the next vulnerability affects your stack