Jake Cleland

**Name of the Vulnerable Software and Affected Versions** MicroRealEstate versions prior to 1.0.0-alpha3 **Description** Authentication bypass is possible due to a lack of token state management. This flaw allows adversaries to brute-force One-Time Passwords (OTP) to gain unauthorized access to any user account. **Recommendations** Update to a version later than 1.0.0-alpha3.

**Name of the Vulnerable Software and Affected Versions** MicroRealEstate versions prior to 1.0.0-alpha3 **Description** Broken object-level access controls exist within the PDF generator functionality. This flaw allows unauthorized access to objects that should be restricted. **Recommendations** Update to a version later than 1.0.0-alpha3.

**Name of the Vulnerable Software and Affected Versions** MicroRealEstate versions prior to 1.0.0-alpha3 **Description** Broken object-level access controls and the use of a deterministic pattern during random ID generation allow attackers to access documents uploaded by landlords or tenants without authorization. **Recommendations** Update MicroRealEstate to a version later than 1.0.0-alpha3.

**Name of the Vulnerable Software and Affected Versions** MicroRealEstate versions prior to 1.0.0-alpha3 **Description** Broken object-level access control on the Template API allows attackers to retrieve document templates used by other organizations without authorization. Broken object-level access control occurs when an application does not properly verify if the user requesting a specific object has the necessary permissions to access it. **Recommendations** Update MicroRealEstate to a version later than 1.0.0-alpha3.

**Name of the Vulnerable Software and Affected Versions** MicroRealEstate versions prior to 1.0.0-alpha3 **Description** A relative path traversal issue exists in the file upload functionality. This flaw allows attackers to potentially overwrite system files by manipulating file paths to access directories outside the intended folder. **Recommendations** Update to a version later than 1.0.0-alpha3.

**Name of the Vulnerable Software and Affected Versions** AlayaCare's Procura Portal versions prior to 9.0.1.2 **Description** The issue is related to a publicly known cryptographic machine key in AlayaCare's Procura Portal, which allows attackers to forge their own authentication cookies and bypass the application's authentication mechanisms. **Recommendations** For versions prior to 9.0.1.2, update to version 9.0.1.2 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive areas of the application that rely on authentication cookies until a patch is applied.