1. Home
  2. CVE Database
  3. CVE-2024-47836
LOW · 3.5

CVE-2024-47836

Admidio is an open-source user management solution. Prior to version 4.3.12, an unsafe deserialization vulnerability allows any unauthenticated user to execute arbitrary code on the server. Version 4....

Vulnerability Description

Admidio is an open-source user management solution. Prior to version 4.3.12, an unsafe deserialization vulnerability allows any unauthenticated user to execute arbitrary code on the server. Version 4.3.12 fixes this issue.

CVSS Score

3.5

LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality
NONE
Integrity
LOW
Availability
NONE

Affected Products

VendorProductVersions
AdmidioAdmidio< 4.3.12

Related Weaknesses (CWE)

CWE-79CWE-502

References

FAQ

What is CVE-2024-47836?

CVE-2024-47836 is a vulnerability with a CVSS score of 3.5 (LOW). Admidio is an open-source user management solution. Prior to version 4.3.12, an unsafe deserialization vulnerability allows any unauthenticated user to execute arbitrary code on the server. Version 4....

How severe is CVE-2024-47836?

CVE-2024-47836 has been rated LOW with a CVSS base score of 3.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2024-47836?

Check the references section above for vendor advisories and patch information. Affected products include: Admidio Admidio.