Low severityNVD Advisory· Published Oct 16, 2024· Updated Oct 16, 2024
Admidio vulnerable to HTML Injection In The Messages Section
CVE-2024-47836
Description
Admidio is an open-source user management solution. Prior to version 4.3.12, an unsafe deserialization vulnerability allows any unauthenticated user to execute arbitrary code on the server. Version 4.3.12 fixes this issue.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
admidio/admidioPackagist | < 4.3.12 | 4.3.12 |
Affected products
2Patches
Vulnerability mechanics
References
4- github.com/advisories/GHSA-7c4c-749j-pfp2ghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2024-47836ghsaADVISORY
- github.com/Admidio/admidio/commit/176f60de6a38dde2b8e848b97647194c12cf5a6cghsaWEB
- github.com/Admidio/admidio/security/advisories/GHSA-7c4c-749j-pfp2ghsax_refsource_CONFIRMWEB
News mentions
0No linked articles in our index yet.