Executive brief
Admidio is a web-based membership management system used by organizations to manage member data and permissions. A security flaw in version 3.3.5 allows low-privileged users to trick the system into granting them higher administrative permissions. This could lead to unauthorized access to sensitive member information or full control over the organization's management portal.
Technical details
A Cross-Site Request Forgery (CSRF) vulnerability exists in Admidio 3.3.5 due to improper origin checking in the roles_function.php component. An attacker can exploit this by crafting a malicious HTML form that targets the application's role management parameters, such as rol_assign_roles, rol_approve_users, and rol_edit_user. By setting these parameters to 1, a low-privileged user can escalate their own privileges or modify role permissions. The attack requires the victim to be authenticated and interact with a malicious page, though the advisory suggests it can lead to privilege escalation without further authentication once the request is processed. A proof-of-concept exploit is publicly available.
Affected products
- Admidio Admidio 3.3.5 and earlier
Timeline
- 2018-09-01: disclosed: Initial discovery and exploit development by researcher
- 2018-09-03: other: Exploit published on Exploit-DB
- 2026-05-25: advisory: CVE published/updated via VulnCheck and NVD