CVE-2024-47836
Admidio vulnerable to HTML Injection In The Messages Section
MEDIUM 4.3EPSS 0.5%
Admidio is an open-source user management solution. Prior to version 4.3.12, an unsafe deserialization vulnerability allows any unauthenticated user to execute arbitrary code on the server. Version 4.3.12 fixes this issue.
- Affected
- Admidio · admidio
- CVSS v3.1 NVD
- 4.3 MEDIUM
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N - CVSS v3.1 GITHUB
- 3.5 LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N - EPSS
- 0.51% chance of exploitation in the next 30 days, 42nd percentile
- Published
- 2024-10-16