Admidio Vulnerabilities and Affected Products
Vulnerabilities associated with admidio/admidio.
Products
Clear product- admidio53 vulnerabilities
- admidio/admidio7 vulnerabilities
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2023-4190MEDIUM | Insufficient Session Expiration in admidio/admidioInsufficient Session Expiration in GitHub repository admidio/admidio prior to 4.2.11. CWE-613Aug 6, 2023 | CVSS6.5v3.1 | EPSS0.603% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2023-3692HIGH | Unrestricted Upload of File with Dangerous Type in admidio/admidioUnrestricted Upload of File with Dangerous Type in GitHub repository admidio/admidio prior to 4.2.10. CWE-434Jul 16, 2023 | CVSS7.2v3.1 | EPSS1.01% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2023-3304MEDIUM | Improper Access Control in admidio/admidioImproper Access Control in GitHub repository admidio/admidio prior to 4.2.9. CWE-284Jun 23, 2023 | CVSS5.4v3.1 | EPSS0.415% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2023-3302HIGH | Improper Neutralization of Formula Elements in a CSV File in admidio/admidioImproper Neutralization of Formula Elements in a CSV File in GitHub repository admidio/admidio prior to 4.2.9. CWE-1236Jun 23, 2023 | CVSS7.8v3.1 | EPSS0.462% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
Improper Access Control in admidio/admidioImproper Access Control in GitHub repository admidio/admidio prior to 4.2.9. CWE-284Jun 23, 2023 | CVSS3.5v3.1 | EPSS0.416% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX | |
CVE-2023-3109MEDIUM | Cross-site Scripting (XSS) - Stored in admidio/admidioCross-site Scripting (XSS) - Stored in GitHub repository admidio/admidio prior to 4.2.8. CWE-79Jun 5, 2023 | CVSS5.4v3.1 | EPSS0.479% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2022-0991HIGH | Insufficient Session Expiration in admidio/admidioInsufficient Session Expiration in GitHub repository admidio/admidio prior to 4.1.9. CWE-613Mar 19, 2022 | CVSS7.1v3.1 | EPSS1.01% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |