4.7Medium
CVE-2025-28355
Description
Volmarg Personal Management System 1.4.65 is vulnerable to Cross Site Request Forgery (CSRF) allowing attackers to execute arbitrary code and obtain sensitive information via the SameSite cookie attribute defaults value set to none
Weakness (CWE):
CWE-352
Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.
Affected products and versions
| Vendor | Product | Versions | |
|---|---|---|---|
| personal-management-system | personal management system | 1.4.65 |
References and patches
- https://github.com/Volmarg/personal-management-system Product
- https://github.com/abbisQQ/CVE-2025-28355/tree/main ExploitThird Party Advisory
- https://github.com/Volmarg/personal-management-system/issues/149 Issue Tracking
CPE matches (NVD) (1)
cpe:2.3:a:personal-management-system:personal_management_system:1.4.65:*:*:*:*:*:*:*