Threat Intelligence Database

Admidio versions before 5.0.11 have a reflected cross-site scripting (XSS) vulnerability in the SSO/SAML endpoint. This vulnerability occurs because unencoded exception messages are echoed in HTTP responses. Unauthenticated attackers can exploit this by injecting arbitrary JavaScript via SAML Issuer elements or LightSaml library parameters, potentially executing code in users' browsers and hijacking sessions.

Admidio versions prior to 5.0.11 contain a vulnerability where role handlers do not properly validate the target organization's membership. This flaw allows authenticated role administrators to manipulate roles of other organizations by supplying a role UUID from a different organization. Actions such as deleting, activating, deactivating, or editing roles can be performed without proper authorization. The vulnerability has a CVSS score of 4.9, indicating medium severity.

Admidio versions prior to 5.0.11 have an authentication bypass vulnerability in the forum module when it is configured in login-only mode. This flaw allows unauthenticated attackers to access forum topics and posts by exploiting improper access control checks in the module's code. The vulnerability does not affect the integrity or availability of the system but exposes confidential forum content to unauthorized users.

Admidio versions before 5.0.11 have an insecure direct object reference vulnerability in the save_temporary mode of mylist_function.php. Authenticated users can exploit this flaw to hijack list configurations by enumerating global list UUIDs and overwriting admin-curated global lists or other users' private lists. This allows attackers to transfer ownership and demote global lists to personal configurations. The vulnerability has a CVSS 3.1 score of 4.3, indicating medium severity.

Admidio versions before 5.0.11 contain a vulnerability in the modules/category-report/preferences.php file where the adm_csrf_token is not validated. This allows an attacker to trick an authenticated administrator into visiting a crafted URL that can delete or duplicate Category Report configurations. The flaw affects the integrity and availability of the Category Report module's configuration. The vulnerability has a CVSS 3.1 score of 4.6, indicating a medium severity impact primarily on integrity and availability with low attack complexity but requiring some user interaction and privileges.