Remote Information Disclosure in Personal Management System by MorySummer
CVE-2025-29456

6.5MEDIUM

Key Information:

Vendor

MorySummer

Status
Personal Management System
Vendor
CVE Published:
17 April 2025
đź”” Create MorySummer Vulnerability Alert

What is CVE-2025-29456?

A vulnerability in Personal Management System version 1.4.65 allows remote attackers to exploit the create Notes function, leading to unintended exposure of sensitive information. This flaw can have serious implications for user privacy and data security, as unauthorized individuals may gain access to confidential data without proper authorization.

References

https://www.yuque.com/morysummer/vx41bz/ckogwt5qwnkd821k

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
Low
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.