CVE-2024-47836
LOWAdmidio <4.3.12 - Code Injection
Title source: llmDescription
Admidio is an open-source user management solution. Prior to version 4.3.12, an unsafe deserialization vulnerability allows any unauthenticated user to execute arbitrary code on the server. Version 4.3.12 fixes this issue.
Scores
CVSS v3
3.5
EPSS
0.0162
EPSS Percentile
81.6%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
Classification
CWE
CWE-502
CWE-79
Status
published
Affected Products (2)
admidio/admidio
< 4.3.12
admidio/admidio
< 4.3.12Packagist
Timeline
Published
Oct 16, 2024
Tracked Since
Feb 18, 2026