CVE-2024-47836

4.3 mediumEPSS 0.5%

Medium (4.3) in admidio admidio. EPSS 0.5% chance of exploitation in the next 30 days.

Admidio is an open-source user management solution. Prior to version 4.3.12, an unsafe deserialization vulnerability allows any unauthenticated user to execute arbitrary code on the server. Version 4.3.12 fixes this issue.

Severity

CVSS 3.1

4.3 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 43% of CVEs (scores of 2026-10-31)
CWEs: CWE-502, CWE-79
Published: 2024-10-16
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

admidio:admidio

References

https://github.com/Admidio/admidio/security/advisories/GHSA-7c4c-749j-pfp2

Check your stack JSON