Skip to content

CVE-2017-8382 admidio CSRF Vulnerability

MediumCVSS 4.5 EPSS 2.6% Public exploit PoC
Published
Updated
Exploit status
Public exploit available

Description

admidio 3.2.8 has CSRF in adm_program/modules/members/members_function.php with an impact of deleting arbitrary user accounts.

Affected products

ProductAffected versionsFixed in
admidio(Packagist) < 4.1-Beta.1 4.1-Beta.1
admidio = 3.2.8 No fix listed

References