Threats tagged 'ghsa-hm42-q32m-vj4f'

Admidio versions up to 5.0.11 have a CSRF vulnerability in the modules/plugins.php endpoint, which handles plugin install, uninstall, and update operations via GET requests without CSRF token validation. An attacker can trick an authenticated administrator into visiting a malicious page that triggers these operations, including uninstalling plugins. The uninstall operation executes SQL scripts that drop database tables, causing irreversible data loss. The vulnerability arises because these state-changing operations lack CSRF protection and rely on GET requests, which browsers send with session cookies under SameSite=Lax. The recommended fix is to switch these operations to POST requests and add CSRF token validation.