CVE-2024-47836 — Admidio vulnerable to HTML Injection In The Messages Section

CVE-2024-47836

Admidio vulnerable to HTML Injection In The Messages Section PUBLISHED

Description (CNA)

Admidio is an open-source user management solution. Prior to version 4.3.12, an unsafe deserialization vulnerability allows any unauthenticated user to execute arbitrary code on the server. Version 4.3.12 fixes this issue.

Affected (CNA)

Vendor / product	Versions
Admidio / admidio	affected < 4.3.12

CWE

CWE-502

References

https://github.com/Admidio/admidio/security/advisories/GHSA-7c4c-749j-pfp2

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.