Vulnerabilities in Admidio

60 results
Vexday analysis

Admidio apresenta 34 vulnerabilidades cadastradas, com 14 publicadas nos últimos 90 dias, indicando atividade recente de descobertas. Nenhuma vulnerabilidade está sob exploração ativa (KEV), e apenas 4 atingem nível crítico, reduzindo o risco imediato. A fraqueza dominante é CWE-352 (Cross-Site Request Forgery), típica de aplicações web, exigindo atenção em controles de validação de origem de requisições.

CVE-2021-43810HIGHCross-site Scripting (XSS) when redirect an urlEPSS 5.0%CVE-2021-32630CRITICALVariousEPSS 1.6%CVE-2020-11004HIGHSQL Injection in AdmidioEPSS 1.5%CVE-2024-38529CRITICALAdmidio Vulnerable to RCE via Arbitrary File Upload in Message AttachmentEPSS 1.2%CVE-2022-0991HIGHInsufficient Session Expiration in admidio/admidioEPSS 1.0%CVE-2023-3692MEDIUMUnrestricted Upload of File with Dangerous Type in admidio/admidioEPSS 1.0%CVE-2026-32756HIGHAdmidio: Unrestricted File Upload via CSRF Token Validation Bypass in Documents & Files ModuleEPSS 1.0%CVE-2024-37906CRITICALAdmidio has Blind SQL Injection in ecard_send.phpEPSS 0.9%CVE-2026-69091HIGHAdmidio before 5.0.11 Authentication Bypass via forum.phpEPSS 0.6%CVE-2023-4190MEDIUMInsufficient Session Expiration in admidio/admidioEPSS 0.6%CVE-2026-82655HIGHAdmidio before 5.0.12 SQL Injection via relation_type_listEPSS 0.6%CVE-2026-34381HIGHAdmidio: Unauthenticated Access to Role-Restricted documents via neutralized .htaccessEPSS 0.5%CVE-2024-47836LOWAdmidio vulnerable to HTML Injection In The Messages SectionEPSS 0.5%CVE-2023-3109MEDIUMCross-site Scripting (XSS) - Stored in admidio/admidioEPSS 0.5%CVE-2026-32817CRITICALAdmidio is Missing Authorization and CSRF Protection on Document and Folder DeletionEPSS 0.5%CVE-2023-3302MEDIUMImproper Neutralization of Formula Elements in a CSV File in admidio/admidioEPSS 0.5%CVE-2026-41655MEDIUMAdmidio: Path Traversal in ECard Preview Allows Reading Arbitrary Server Files Including Database CredentialsEPSS 0.5%CVE-2026-32812MEDIUMAdmidio Vulnerable to SSRF and Local File Read via Unrestricted URL Fetch in SSO Metadata EndpointEPSS 0.5%CVE-2026-82657HIGHAdmidio before 5.0.12 Authentication Bypass via RSS feedsEPSS 0.5%CVE-2026-41660HIGHAdmidio: Inverted 2FA Reset Authorization Check Lets Group Leaders Strip Admin TOTPEPSS 0.4%