CVE-2025-29456: SSRF
Published Apr 17, 2025
·Updated
An issue in personal-management-system Personal Management System 1.4.65 allows a remote attacker to obtain sensitive information via the create Notes function.
Affected Software
2 affected components
personal-management-system Personal Management System
personal-management-system Personal Management System=1.4.65
Event History
Apr 17, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·10:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2025-29456?
CVE-2025-29456 is classified as a medium severity vulnerability due to its potential to expose sensitive information.
2
How do I fix CVE-2025-29456?
To fix CVE-2025-29456, upgrade to the latest version of the Personal Management System that includes the security patch.
3
What type of information can be exposed by CVE-2025-29456?
CVE-2025-29456 can allow remote attackers to access sensitive information created through the Notes function.
4
Which versions of Personal Management System are affected by CVE-2025-29456?
CVE-2025-29456 affects Personal Management System version 1.4.65 and possibly earlier versions.
5
Who is responsible for addressing CVE-2025-29456?
The responsibility for addressing CVE-2025-29456 lies with users and administrators of the Personal Management System software.