CVE-2026-57870
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk12th percentile - higher than 12% of all known CVEs
Summary
A broken object-level access control vulnerability in the Template API of MicroRealEstate allows attackers to retrieve document templates used by other organizations without authorization.
Risk Assessment
The risk involves unauthorized access to confidential document templates of other organizations, potentially leading to business data leakage and confidentiality breaches.
Recommendation
Immediately update MicroRealEstate to the latest version after 1.0.0-alpha3 and implement object-level access control mechanisms for the Template API.
Original NVD description (English source)
Broken object-level access control on the Template API in MicroRealEstate allows attackers to retrieve document templates used by other organizations without authorization. This issue affects MicroRealEstate: through 1.0.0-alpha3.