Description
Admidio versions before 5.0.12 contain a broken access control vulnerability in profile_function.php that allows authenticated low-privilege users to read another user's future role memberships. Attackers can bypass profile-level authorization by directly calling the reload_future_memberships endpoint with a victim's user UUID to disclose sensitive membership information.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Admidio | admidio | < 5.0.12 | 5.0.12 |
References
- GitHub Security Advisory (GHSA-4p3x-3rxj-v7c4) vendor-advisory
- VulnCheck Advisory: Admidio before 5.0.12 Broken Access Control via profile_function.php third-party-advisory