4.7Mittel
CVE-2025-28355
Beschreibung
Volmarg Personal Management System 1.4.65 is vulnerable to Cross Site Request Forgery (CSRF) allowing attackers to execute arbitrary code and obtain sensitive information via the SameSite cookie attribute defaults value set to none
Schwachstellentyp (CWE):
CWE-352
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
Betroffene Produkte und Versionen
| Hersteller | Produkt | Versionen | |
|---|---|---|---|
| personal-management-system | personal management system | 1.4.65 |
Referenzen und Patches
- https://github.com/Volmarg/personal-management-system Product
- https://github.com/abbisQQ/CVE-2025-28355/tree/main ExploitThird Party Advisory
- https://github.com/Volmarg/personal-management-system/issues/149 Issue Tracking
CPE-Treffer (NVD) (1)
cpe:2.3:a:personal-management-system:personal_management_system:1.4.65:*:*:*:*:*:*:*