CVE-2025-28355
- Source
- https://cve.org/CVERecord?id=CVE-2025-28355
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-28355.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2025-28355
- Published
- 2025-04-18T00:00:00Z
- Modified
- 2026-08-12T03:51:28Z
- Severity
-
- 4.7 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N CVSS Calculator
- Summary
- [none]
- Details
-
Volmarg Personal Management System 1.4.65 is vulnerable to Cross Site Request Forgery (CSRF) allowing attackers to execute arbitrary code and obtain sensitive information via the SameSite cookie attribute defaults value set to none
- Database specific
{ "cna_assigner": "mitre", "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/28xxx/CVE-2025-28355.json" }- References
-
- https://github.com/abbisQQ/CVE-2025-28355/tree/main
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/28xxx/CVE-2025-28355.json
- https://nvd.nist.gov/vuln/detail/CVE-2025-28355
- https://github.com/Volmarg/personal-management-system/issues/149
- https://github.com/Volmarg/personal-management-system
Affected packages
Git / github.com/volmarg/personal-management-system
Affected ranges
- Type
- GIT
- Repo
- https://github.com/volmarg/personal-management-system
- Events
-
IntroducedLast Affected
- Database specific
-
Show details
{ "cpe": "cpe:2.3:a:personal-management-system:personal_management_system:1.4.65:*:*:*:*:*:*:*", "extracted_events": [ { "introduced": "1.4.65" }, { "last_affected": "1.4.65" } ], "source": "CPE_STRING" }