Machine-written summary
Summary written by Claude Haiku from the source advisory. Not reviewed by a person.
Admidio versions before 5.0.10 are affected. The enable action for SAML and OIDC SSO clients in modules/sso/clients.php does not validate the CSRF token, unlike the file's other state-changing actions, and accepts GET parameters. An attacker who can get a logged-in Admidio administrator to load a malicious page can enable or disable any configured SSO client, which can break login for relying applications that use it. Upgrade to Admidio 5.0.10 or later, which is the listed fixed version.
Not analysed yet
We haven’t published our analysis of this Advisory yet. Once a person has reviewed it, this page will say what’s vulnerable, what has to be true for your app to be affected, and how to check.
Severity and exploitation
| Score | Rating | CVSS | Vector | Source |
|---|---|---|---|---|
| 5.4 | Medium | 3.1 | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L | CNA (GitHub_M) |
- CISA KEV Not listed.
- EPSS 0.0014, the 3rd percentile, on 11 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.
Timeline
- 31 Oct 2026, 13:58 UTC First seen by agentprime
- 31 Oct 2026, 13:58 UTC Confirmed by OSV