4.7Media
CVE-2025-28355
Descripción
Volmarg Personal Management System 1.4.65 is vulnerable to Cross Site Request Forgery (CSRF) allowing attackers to execute arbitrary code and obtain sensitive information via the SameSite cookie attribute defaults value set to none
Debilidad (CWE):
CWE-352
Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.
Productos y versiones afectados
| Fabricante | Producto | Versiones | |
|---|---|---|---|
| personal-management-system | personal management system | 1.4.65 |
Referencias y parches
- https://github.com/Volmarg/personal-management-system Product
- https://github.com/abbisQQ/CVE-2025-28355/tree/main ExploitThird Party Advisory
- https://github.com/Volmarg/personal-management-system/issues/149 Issue Tracking
Coincidencias CPE (NVD) (1)
cpe:2.3:a:personal-management-system:personal_management_system:1.4.65:*:*:*:*:*:*:*