CVE-2025-39390

Summary

CVE-2025-39390 is a vulnerability affecting the magepeopleteam Booking and Rental Manager, where access to functionality is not properly constrained by Access Control Lists (ACLs). This issue allows unauthorized access to certain features in versions 1 through 2.3.8 of the software. An attacker can exploit this Missing Authorization vulnerability to gain unapproved access, potentially leading to data theft or unintended modifications. It is essential for organizations using this software to apply the necessary patches or updates to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.