MicroRealEstate vulnerabilities
We track 4 vulnerabilities in MicroRealEstate products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on July 7, 2026.
Latest MicroRealEstate vulnerabilities
- 7.1 High severity
MicroRealEstate: Relative Path Traversal
Relative path traversal vulnerability in MicroRealEstate file upload functionality allows attackers to potentially overwrite system files. This issue affects MicroRealEstate: through 1.0.0-alpha3.
- 7.1 High severity
MicroRealEstate: Authorization Bypass Through User-Controlled Key
Broken object-level access controls and the use of a deterministic pattern during random ID generation in MicroRealEstate allows attackers to access documents uploaded by landlords or tenants without authorization. This issue affects MicroRealEstate: through 1
- 7.1 High severity
MicroRealEstate: Authorization Bypass Through User-Controlled Key
MicroRealEstate is affected by broken object-level access controls in PDF generator functionality. This issue affects MicroRealEstate: through 1.0.0-alpha3.
- 8.8 High severity
MicroRealEstate: Authentication Bypass Using an Alternate Path or Channel
MicroRealEstate allows adversaries to bypass authentication due to a lack of token state management. This would permit adversaries targeting MicroRealEstate deployments to brute-force One-Time Passwords (OTP) to log in as any user. This issue affects MicroReal