Skip to content
OpenAdvisories
Low · 3.5 CVE-2024-47836 EUVD-2024-2978GHSA-7c4c-749j-pfp2

Admidio vulnerable to HTML Injection In The Messages Section

Published Oct 16, 2024 · Updated Oct 16, 2024 · Assigned by GitHub_M

Description

Admidio is an open-source user management solution. Prior to version 4.3.12, an unsafe deserialization vulnerability allows any unauthenticated user to execute arbitrary code on the server. Version 4.3.12 fixes this issue.

Affected products

VendorProductAffectedFixed
Admidio admidio < 4.3.12 —

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist admidio/admidio < 4.3.12 4.3.12 GHSA-7c4c-749j-pfp2

References