CVE-2026-47230

Name of the Vulnerable Software and Affected Versions Admidio versions prior to 5.0.10

Description An issue exists in the file rename save mode of the modules/documents-files.php endpoint. The system performs a rights check using the hasUploadRight() function on the folder uuid parameter provided in the URL, but the actual rename operation is performed on the file uuid parameter without verifying if the user has upload permissions for the folder that actually contains the file. The DocumentsService::renameFile() function resolves the target file using getFileForDownload(), which only requires read access. Consequently, a user who has upload rights to any folder can rename files and overwrite descriptions of files in any other folder they can view, leading to unauthorized content tampering and potential defacement of public announcements or policies.

Recommendations Update to version 5.0.10. As a temporary workaround, restrict user permissions to ensure users only have access to folders necessary for their role to minimize the risk of unauthorized file renaming.