PT-2025-14012 · Unknown · Guominjim Personmanage

Testdemo · Published 2025-04-01 · Updated 2025-04-01 · CVE-2025-3043

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions GuoMinJim PersonManage (affected versions not specified)

Description A critical issue has been found in GuoMinJim PersonManage. This issue affects the function preHandle of the file /login/. The manipulation of the argument Request leads to path traversal. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. This product takes the approach of rolling releases to provide continuous delivery.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2025-3043

Affected Products

Guominjim Personmanage

References · 10

• 🔥 https://github.com/GuoMinJim/PersonManage/issues/7#issue-2939940887 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-3043 · Security Note
• https://github.com/GuoMinJim/PersonManage/issues/7 · Note
• https://vuldb.com/?submit.524949 · Note
• https://t.me/cvenotify/117135 · Telegram Post
• https://twitter.com/CVEnew/status/1906977444646572178 · Twitter Post
• https://vuldb.com/?id.302105 · Note
• https://t.me/cvedetector/21699 · Telegram Post
• https://t.me/cvetracker/20421 · Telegram Post
• https://vuldb.com/?ctiid.302105 · Note