https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 23:38:00 +0000 https://cve.radiocsirt.org/vuln/cve-2026-41663 <p><strong>Affected:</strong> admidio</p> <p>Admidio is an open-source user management solution. Prior to version 5.0.9, several administrative operations in Admidio&#39;s preferences module (database backup, test email, htaccess generation) fire via GET requests with no CSRF token validation. Because SameSite=Lax cookies travel with top-level GET navigations, an attacker forces an authenticated admin to trigger these actions from a malicious page. This issue has been patched in version 5.0.9.</p> <p><strong>Affected:</strong> admidio</p> <p>Admidio is an open-source user management solution. Prior to version 5.0.9, several administrative operations in Admidio&#39;s preferences module (database backup, test email, htaccess generation) fire via GET requests with no CSRF token validation. Because SameSite=Lax cookies travel with top-level GET navigations, an attacker forces an authenticated admin to trigger these actions from a malicious page. This issue has been patched in version 5.0.9.</p> https://cve.radiocsirt.org/vuln/cve-2026-41663