Low severity3.5NVD Advisory· Published Oct 16, 2024· Updated Jun 17, 2026

CVE-2024-47836

Description

Admidio is an open-source user management solution. Prior to version 4.3.12, an unsafe deserialization vulnerability allows any unauthenticated user to execute arbitrary code on the server. Version 4.3.12 fixes this issue.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
admidio/admidioPackagist	< 4.3.12	4.3.12

Affected products

Admidio/Admidio2 versions
cpe:2.3:a:admidio:admidio:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:admidio:admidio:*:*:*:*:*:*:*:*range: <4.3.12
- (no CPE)range: < 4.3.12
ghsa-coords
pkg:composer/admidio/admidio
Range: < 4.3.12

Patches

Vulnerability mechanics

References

github.com/Admidio/admidio/security/advisories/GHSA-7c4c-749j-pfp2nvdVendor AdvisoryWEB
github.com/advisories/GHSA-7c4c-749j-pfp2ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2024-47836ghsaADVISORY
github.com/Admidio/admidio/commit/176f60de6a38dde2b8e848b97647194c12cf5a6cghsaWEB

News mentions

No linked articles in our index yet.

cvss	0.227
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000