PT-2026-67413 · Admidio · Admidio
CVSS v4.0
8.7
High
| Vector | AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N |
Name of the Vulnerable Software and Affected Versions
Admidio versions prior to 5.0.11
Description
An authentication bypass exists in the forum module when the system is configured in login-only mode. The access control logic in the
modules/forum.php file fails to validate the login-only configuration state. This allows unauthenticated attackers to read forum topics and posts by directly accessing the module using read-only parameters.Recommendations
Update to version 5.0.11 or later.
Exploit
Fix
Missing Authentication
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Admidio