Admidio Insufficient Session Expiration vulnerability

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2023-4190 · ADVISORY
• admidio/admidio commit 391fb2a · WEB
• admidio/admidio · PACKAGE
• huntr.dev/bounties/71bc75d2-320c-4332-ad11-9de535a06d92 · WEB

admidio/admidio のその他の脆弱性

• CVE-2026-53760中 5.2Admidio is an open-source user management solution. In versions 5.0.11 and prior, the modules/plugins.php endpoint handles plugin installati…
• CVE-2026-47234中 4.4Admidio is an open-source user management solution. Prior to version 5.0.10, when debug logging is enabled, `Session::setCookie()` logs full…
• CVE-2026-47233中 6.5Admidio is an open-source user management solution. Version 5.0.9 added a missing `isAdministratorInventory()` gate to `case 'item_delete':`…
• CVE-2026-47232中 4.3Admidio is an open-source user management solution. Prior to version 5.0.10, the sensitive `mode=export` action in `modules/sso/keys.php` ex…
• CVE-2026-47231高 8.1Admidio is an open-source user management solution. Prior to version 5.0.10, `modules/documents-files.php` gates state-changing modes by che…