Vulnerability · Published Sep 25, 2025 · Assigned by VulDB

CVE-2025-10947Sistemas Pleno Gestão de Locação CPF validarCpf authorization

Medium 5.3

In plain English

A medium-severity authorization bypass via user-controlled key in Gestão de Locação from Sistemas Pleno. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 43% of all known vulnerabilities).

Severity (CVSS 3.1)5.3Medium

Exploit odds (30 days)0.5%top 57.1% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

A flaw has been found in Sistemas Pleno Gestão de Locação up to 2025.7.x. The impacted element is an unknown function of the file /api/areacliente/pessoa/validarCpf of the component CPF Handler. Executing a manipulation of the argument pes_cpf can lead to authorization bypass. The attack can be executed remotely. The exploit has been published and may be used. Upgrading to version 2025.8.0 is sufficient to resolve this issue. It is advisable to upgrade the affected component.

Affected products (as reported)

Vendor	Product	Versions
Sistemas Pleno	Gestão de Locação	2025.02025.12025.22025.32025.42025.52025.62025.7

Weakness: CWE-639, CWE-285 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C

References

VDB-325817 | Sistemas Pleno Gestão de Locação CPF validarCpf authorization vdb-entry, technical-description
VDB-325817 | CTI Indicators (IOB, IOC, IOA) signature, permissions-required
Submit #652282 | Sistemas Pleno Gestão de Locação Prior to 2025.8.0 Insecure Direct Object Reference (IDOR) third-party-advisory
https://github.com/lfparizzi/CVE-Sistemas_Pleno/tree/main related
https://github.com/lfparizzi/CVE-Sistemas_Pleno/tree/main?tab=readme-ov-file#-proofs exploit