Missing Authorization Vulnerability in Booking and Rental Manager by Mage People Team
CVE-2025-47585
6.5MEDIUM
What is CVE-2025-47585?
A missing authorization vulnerability exists in the Booking and Rental Manager developed by the Mage People team. This vulnerability permits unauthorized access to certain functionalities that are not properly constrained by Access Control Lists (ACLs). As a result, users may be able to access and manipulate data they are not entitled to, potentially compromising the security and integrity of the application. This issue affects versions from n/a through 2.3.8.
Affected Version(s)
Booking and Rental Manager <= 2.3.8