CVE-2026-111914
medium
CVSS 6.5
Admidio from 5.0.11 before 5.0.16 contains a broken access control vulnerability in modules...
概要
Admidio from 5.0.11 before 5.0.16 contains a broken access control vulnerability in modules...
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Admidio from 5.0.11 before 5.0.16 contains a broken access control vulnerability in modules/inventory/inventory_data.php that allows authenticated users to bypass the inventory_module_enabled restriction. Attackers with any valid login can request the DataTables JSON feed to read every inventory item and keeper names, even when the module is disabled.
出典: NIST National Vulnerability Database NVD GitHub Advisory
参照URL
- web github.com
- web github.com
- web vulncheck.com
- web nvd.nist.gov
- web github.com