TI-2026-41672 CVE-2026-57871 · GHSA-56qr-p95w-94vh
Path traversal in MicroRealEstate
Priority LOW 32
Relative path traversal vulnerability in MicroRealEstate file upload functionality allows attackers to potentially overwrite system files.
Vulnerabilities
5 records
TI-2026-41671 CVE-2026-57870 · GHSA-jj92-236g-5h8p
Authorization bypass in MicroRealEstate
Priority LOW 24
Broken object-level access control on the Template API in MicroRealEstate allows attackers to retrieve document templates used by other organizations without authorization.
TI-2026-41670 CVE-2026-57869 · GHSA-2rhx-q7hx-f25r
Authorization bypass in MicroRealEstate
Priority LOW 31
Broken object-level access controls and the use of a deterministic pattern during random ID generation in MicroRealEstate allows attackers to access documents uploaded by landlords or tenants without authorization.
TI-2026-41669 CVE-2026-57868 · GHSA-qjq2-685q-j8gv
Authorization bypass in MicroRealEstate
Priority LOW 31
MicroRealEstate is affected by broken object-level access controls in PDF generator functionality.
TI-2026-41668 CVE-2026-57867 · GHSA-j5cw-4r7c-4vw8
Authentication bypass in MicroRealEstate
Priority MEDIUM 45
MicroRealEstate allows adversaries to bypass authentication due to a lack of token state management.