medium4.3
CVE-2026-111913
Admidio from 5.0.0 before 5.0.16 contains an authorization bypass vulnerability that allows authenticated users to export lists despite export restrictions by …
Impact
Admidio from 5.0.0 before 5.0.16 contains an authorization bypass vulnerability that allows authenticated users to export lists despite export restrictions by requesting mode=pdfl. The groups_roles_export check in modules/groups-roles/lists_show.php omits pdfl, which later runs the pdf export, letting users with list view rights download member lists as PDF files.
Affected products
| Product | Affected versions |
|---|---|
| Admidio From 5.0.0 | before 5.0.16 |
Versions were read from the advisory text. No structured product data has been published for this record yet.