CVE-2026-111912
medium
CVSS 6.5
Admidio from 5.0.0 before 5.0.16 contains an insecure direct object reference vulnerability in...
Résumé
Admidio from 5.0.0 before 5.0.16 contains an insecure direct object reference vulnerability in...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Admidio from 5.0.0 before 5.0.16 contains an insecure direct object reference vulnerability in ForumService::saveTopic() that allows authenticated members to modify other users' forum topics. Attackers can replace the topic_uuid parameter in their own topic_save request, reusing their CSRF token, to overwrite the victim topic's title and first post.
Source: NIST National Vulnerability Database NVD GitHub Advisory
Références
- web github.com
- web vulncheck.com
- web nvd.nist.gov
- web github.com