Packagist/admidio/admidio CVE-2017-8382: medium 4.5, EPSS 2.63%

admidio CSRF Vulnerability

Action: Upgrade admidio/admidio to 4.1-Beta.1 or later.

composer require admidio/admidio:4.1-Beta.1

Affected

Fixed versions

Sources

• osv: GHSA-c4v8-2hg8-jv77
• https://nvd.nist.gov/vuln/detail/CVE-2017-8382
• https://github.com/Admidio/admidio/issues/612
• https://github.com/Admidio/admidio/pull/1074
• https://github.com/Admidio/admidio/commit/a7ac9d3c9e0780e877fe9ac846ac64b284de8553
• https://github.com/Admidio/admidio
• https://github.com/faizzaidi/Admidio-3.2.8-CSRF-POC-by-Provensec-llc
• https://www.exploit-db.com/exploits/42005
• http://en.0day.today/exploit/27771

CVE-2017-8382 · published 2022-05-17T02:42:45Z · modified 2023-11-08T03:59:27.863274Z · JSON