CVE-2025-28355: CSRF

Published Apr 18, 2025

Updated

Volmarg Personal Management System 1.4.65 is vulnerable to Cross Site Request Forgery (CSRF) allowing attackers to execute arbitrary code and obtain sensitive information via the SameSite cookie attribute defaults value set to none

Affected Software

2 affected components

Volmarg Personal Management System

personal-management-system Personal Management System=1.4.65

Event History

Apr 18, 2025

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·07:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-28355?

CVE-2025-28355 is classified as a high severity vulnerability due to its potential to allow cross-site request forgery attacks.

How do I fix CVE-2025-28355?

To mitigate CVE-2025-28355, it is recommended to update the SameSite cookie attribute to 'Strict' or 'Lax' instead of 'None'.

What type of vulnerability is CVE-2025-28355?

CVE-2025-28355 is a Cross Site Request Forgery (CSRF) vulnerability that allows unauthorized actions on behalf of users.

What are the consequences of exploiting CVE-2025-28355?

Exploiting CVE-2025-28355 could lead to the execution of arbitrary code and the exposure of sensitive user information.

Which software versions are affected by CVE-2025-28355?

CVE-2025-28355 specifically affects version 1.4.65 of the Volmarg Personal Management System.