Personal Management System Server-Side Request Forgery Vulnerability

A server-side request forgery (SSRF) vulnerability has been identified in Personal Management System version 1.4.65. This issue allows remote attackers to exploit the 'Upload' function to upload malicious SVG files. The vulnerability enables attackers to make web requests to arbitrary locations from the web application, potentially querying and modifying information from internal services.

Impact

Exploitation of this vulnerability allows for server-side request forgery, where an attacker can make requests from the server to internal services or external resources, potentially leading to unauthorized information disclosure or modification.