https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-27T15:00:27.814457+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2018-25370 CVE-2018-25370 — Admidio 3.3.5 Cross-Site Request Forgery via roles_function.php 2026-10-27T15:00:27.815530+00:00

Affected: Admidio

Admidio 3.3.5 contains a cross-site request forgery vulnerability that allows low-privilege users to increase their permissions by exploiting improper origin checking. Attackers can craft malicious HTML forms targeting roles_function.php with parameters like rol_assign_roles, rol_approve_users, and rol_edit_user set to 1 to escalate privileges without authentication.