Veille CVE

Recherche « MicroRealEstate »

5 CVE

Critique 0 Élevée 4 Moyenne 1 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « MicroRealEstate » ✕
  1. CVE-2026-57871 7.1 Élevée

    MicroRealEstate

    Relative path traversal vulnerability in MicroRealEstate file upload functionality allows attackers to potentially overwrite system files. This issue affects MicroRealEstate: through 1.0.0-alpha3.

  2. CVE-2026-57870 5.3 Moyenne

    MicroRealEstate

    Broken object-level access control on the Template API in MicroRealEstate allows attackers to retrieve document templates used by other organizations without authorization. This issue affects MicroRealEstate: through 1.0.0-alpha3.

  3. CVE-2026-57869 7.1 Élevée

    MicroRealEstate

    Broken object-level access controls and the use of a deterministic pattern during random ID generation in MicroRealEstate allows attackers to access documents uploaded by landlords or tenants without authorization. This issue affects MicroRealEstate: through 1.0.0-alpha3.

  4. CVE-2026-57868 7.1 Élevée

    MicroRealEstate

    MicroRealEstate is affected by broken object-level access controls in PDF generator functionality. This issue affects MicroRealEstate: through 1.0.0-alpha3.

  5. CVE-2026-57867 8.8 Élevée

    MicroRealEstate

    MicroRealEstate allows adversaries to bypass authentication due to a lack of token state management. This would permit adversaries targeting MicroRealEstate deployments to brute-force One-Time Passwords (OTP) to log in as any user. This issue affects MicroRealEstate: through 1.0.0-alpha3.