4.7
CVE-2025-28355
- EPSS 0.16%
- Veröffentlicht 18.04.2025 00:00:00
- Zuletzt bearbeitet 20.06.2025 16:19:02
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginVolmarg Personal Management System 1.4.65 is vulnerable to Cross Site Request Forgery (CSRF) allowing attackers to execute arbitrary code and obtain sensitive information via the SameSite cookie attribute defaults value set to none
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Personal-management-system ≫ Personal Management System Version1.4.65
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.16% | 0.375 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| 134c704f-9b21-4f2e-91b3-4a467353bcc0 | 4.7 | 1.6 | 2.7 |
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N
|
CWE-352 Cross-Site Request Forgery (CSRF)
The web application does not, or can not, sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request.