CVE-2024-47836CWE-502

Admidio vulnerable to HTML Injection In The Messages Section

Low · published October 16, 2024

CVSS v3.1
3.5
EPSS
1%
Percentile
42.7
In the wild
Unconfirmed
What it is

Admidio is an open-source user management solution. Prior to version 4.3.12, an unsafe deserialization vulnerability allows any unauthenticated user to execute arbitrary code on the server. Version 4.3.12 fixes this issue.

The record
Technical detail
CVSS v3.1
3.5 · LOW
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00511 · 42.7th percentile
Weakness
CWE-502 · Deserialization of Untrusted Data
Published
2024-10-16T19:43Z
EPSS history
Timeline
  • 16 OCT 19:43Z
    Admidio vulnerable to HTML Injection In The Messages Section
    cvelistv5