VULNERABILITY INTELLIGENCE

CVE-2025-28355

CVSS score4.7 MEDIUM
EPSS probability0.22%
CISA KEVNot currently listed
Published2025-04-18
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N

Description

Volmarg Personal Management System 1.4.65 is vulnerable to Cross Site Request Forgery (CSRF) allowing attackers to execute arbitrary code and obtain sensitive information via the SameSite cookie attribute defaults value set to none

Weakness classification

  • 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-352

Primary references