Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Sistemas Pleno Gestão de Locação CPF validarCpf authorization
Vulnerability Description
A flaw has been found in Sistemas Pleno Gestão de Locação up to 2025.7.x. The impacted element is an unknown function of the file /api/areacliente/pessoa/validarCpf of the component CPF Handler. Executing a manipulation of the argument pes_cpf can lead to authorization bypass. The attack can be executed remotely. The exploit has been published and may be used. Upgrading to version 2025.8.0 is sufficient to resolve this issue. It is advisable to upgrade the affected component.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Vulnerability Type
通过用户控制密钥绕过授权机制
Vulnerability Title
Sistemas Pleno Gestão de Locação 安全漏洞
Vulnerability Description
Sistemas Pleno Gestão de Locação是巴西Sistemas Pleno公司的一个房地产租赁软件。 Sistemas Pleno Gestão de Locação 2025.7.x及之前版本存在安全漏洞，该漏洞源于对文件/api/areacliente/pessoa/validarCpf中参数pes_cpf的错误操作，可能导致授权绕过。
CVSS Information
N/A
Vulnerability Type
N/A