CVE-2025-29454: SSRF
Published Apr 17, 2025
·Updated
An issue in personal-management-system Personal Management System 1.4.65 allows a remote attacker to obtain sensitive information via the Upload function.
Affected Software
2 affected components
personal-management-system Personal Management System
personal-management-system Personal Management System=1.4.65
Event History
Apr 17, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·09:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2025-29454?
CVE-2025-29454 has a medium severity level due to its potential to expose sensitive information.
2
How do I fix CVE-2025-29454?
To fix CVE-2025-29454, ensure that your instance of Personal Management System is updated to the latest version that addresses this vulnerability.
3
Who is affected by CVE-2025-29454?
CVE-2025-29454 affects users of the Personal Management System version 1.4.65.
4
What type of attack does CVE-2025-29454 enable?
CVE-2025-29454 enables a remote attacker to obtain sensitive information through the Upload function.
5
Can CVE-2025-29454 be exploited without authentication?
Yes, CVE-2025-29454 can be exploited by unauthenticated remote attackers.