CVE-2025-63686

PoC ×2—

CVSS 3.1

6.5 medium

EPSS

<1%p29

Published

Nov 7, 2025 (Nov 7, 2025)

Modified

Jun 17, 2026

Description

There is an arbitrary file download vulnerability in GuoMinJim PersonManage thru commit 5a02b1ab208feacf3a34fc123c9381162afbaa95 (2020-11-23) in the document query function under the Download Center menu in the PersonManage system.

Vendors: guominjim
Products: personmanage
Weakness: CWE-284
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news0 stories

No ingested article mentions this CVE yet.