Vulnerabilidades em admidio
68 resultadosAnálise Vexday
Admidio apresenta 7 vulnerabilidades catalogadas, nenhuma em exploração ativa conhecida nem crítica, indicando risco contido. A fraqueza predominante (CWE-284 - controle de acesso impróprio) sugere problemas de autenticação ou autorização que demandam revisão de permissões. Ausência de publicações recentes oferece alguma estabilidade, embora o histórico de controle de acesso requeira atenção em atualizações futuras.
CVE-2026-109329HIGHAdmidio 4.3.2 through 4.3.17 and 5.0.0 before 5.0.15 Cross-Organization Access Control Bypass via members_assignment.phpEPSS 0.3%CVE-2026-30927MEDIUMAdmidio: Event participation IDOR - non-leaders can register other users for events via user_uuid parameterEPSS 0.3%CVE-2026-41670HIGHAdmidio: SAML Response Sent to Unvalidated Assertion Consumer Service URL from AuthnRequestEPSS 0.3%CVE-2026-69094MEDIUMAdmidio before 5.0.11 IDOR via save_temporary mylist_function.phpEPSS 0.3%CVE-2026-41659LOWAdmidio: Hidden Profile Field Values Leaked via Blind Search Oracle in Member AssignmentEPSS 0.3%CVE-2026-109327MEDIUMAdmidio 4.0.12 through 4.3.17 and 5.0.0 before 5.0.15 Reflected XSS via system/redirect.phpEPSS 0.3%CVE-2026-32818MEDIUMAdmidio is Missing Authorization on Forum Topic and Post DeletionEPSS 0.2%CVE-2026-109328MEDIUMAdmidio 5.0.0 before 5.0.15 Unauthenticated Stored XSS via Registration NameEPSS 0.2%CVE-2026-41658MEDIUMAdmidio: Missing Authorization on Inventory Module Destructive Endpoints Allows Any Authenticated User to Delete ItemsEPSS 0.2%CVE-2026-32757MEDIUMAdmidio: HTMLPurifier Bypass in eCard Message Allows HTML Email InjectionEPSS 0.2%CVE-2026-42194MEDIUMIncomplete fix for CVE-2026-32812: SSRF in admidioEPSS 0.2%CVE-2026-111913MEDIUMAdmidio 5.0.0 before 5.0.16 Authorization Bypass via pdfl Mode in lists_show.phpEPSS 0.2%CVE-2026-111912HIGHAdmidio 5.0.0 before 5.0.16 IDOR via Forum Topic UpdateEPSS 0.2%CVE-2018-25370MEDIUMAdmidio 3.3.5 Cross-Site Request Forgery via roles_function.phpEPSS 0.2%CVE-2026-41669HIGHAdmidio: SAML Signature Validation Result Ignored — Forged AuthnRequests and LogoutRequests ProcessedEPSS 0.2%CVE-2026-41661MEDIUMAdmidio: Reflected XSS in msg_window.php via Square Bracket to HTML Tag ConversionEPSS 0.2%CVE-2026-34384MEDIUMAdmidio: Missing CSRF Protection on Registration Approval ActionsEPSS 0.2%CVE-2026-47234MEDIUMAdmidio writes session IDs and auto-login cookie values to application logsEPSS 0.2%CVE-2026-53760MEDIUMAdmidio: CSRF on Plugin Install, Uninstall, and Update via Unprotected GET RequestsEPSS 0.2%CVE-2026-69093HIGHAdmidio before 5.0.11 CSRF via category-report preferencesEPSS 0.2%