medium6.5
CVE-2026-111912
Admidio from 5.0.0 before 5.0.16 contains an insecure direct object reference vulnerability in ForumService::saveTopic() that allows authenticated members to m…
Impact
Admidio from 5.0.0 before 5.0.16 contains an insecure direct object reference vulnerability in ForumService::saveTopic() that allows authenticated members to modify other users' forum topics. Attackers can replace the topic_uuid parameter in their own topic_save request, reusing their CSRF token, to overwrite the victim topic's title and first post.
Affected products
| Product | Affected versions |
|---|---|
| Admidio From 5.0.0 | before 5.0.16 |
Versions were read from the advisory text. No structured product data has been published for this record yet.