CVE-2025-39457

Summary

CVE-2025-39457 is a Missing Authorization vulnerability affecting the magepeopleteam Booking and Rental Manager from versions n/a through 2.2.8. An attacker can exploit this issue by taking advantage of incorrectly configured access control security levels, potentially gaining unauthorized access to sensitive information or functionality. This vulnerability could lead to significant security risks and potential data breaches. It is recommended that users of the Booking and Rental Manager upgrade to a patched version as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.