CVE-2026-47229

Name of the Vulnerable Software and Affected Versions Admidio versions prior to 5.0.10

Description Cross-Site Request Forgery (CSRF) exists in the modules/sso/clients.php endpoint. The enable case fails to validate the adm csrf token and accepts requests via GET parameters. This allows an attacker to trick an authenticated administrator into disabling or re-enabling any configured SAML or OIDC client by inducing them to visit a malicious page. Disabling an SSO client causes a service outage for all downstream relying-party applications that use it for authentication. The process involves the enable() function, which modifies the smc enabled column for SAML clients or the ocl enabled column for OIDC clients, and the save() function, which persists the change. The attack requires the uuid of the target client, which can be obtained via the UI or metadata endpoints.

Recommendations Update to version 5.0.10. As a temporary workaround, restrict access to the modules/sso/clients.php endpoint to trusted networks only.