{"id":"GHSA-c4v8-2hg8-jv77","aliases":["CVE-2017-8382"],"title":"admidio CSRF Vulnerability","titleSource":"OSV","descriptionSource":"OSV","declaredSeverity":"MODERATE","description":"admidio 3.2.8 has CSRF in `adm_program/modules/members/members_function.php` with an impact of deleting arbitrary user accounts.","severity":"medium","score":4.5,"published":"2022-05-17T02:42:45.000Z","modified":"2023-11-08T03:59:27.863Z","withdrawn":false,"knownExploited":false,"affected":[{"ecosystem":"Packagist","name":"admidio/admidio","sources":[{"name":"OSV · GHSA-c4v8-2hg8-jv77","url":"https://osv.dev/vulnerability/GHSA-c4v8-2hg8-jv77"}],"ranges":[{"events":[{"introduced":"0"},{"fixed":"4.1-Beta.1"}],"type":"ECOSYSTEM"}],"versions":[],"fixed":["4.1-Beta.1"]}],"sourceAffected":[],"references":["https://nvd.nist.gov/vuln/detail/CVE-2017-8382","https://github.com/Admidio/admidio/issues/612","https://github.com/Admidio/admidio/pull/1074","https://github.com/Admidio/admidio/commit/a7ac9d3c9e0780e877fe9ac846ac64b284de8553","https://github.com/Admidio/admidio","https://github.com/faizzaidi/Admidio-3.2.8-CSRF-POC-by-Provensec-llc","https://www.exploit-db.com/exploits/42005","http://en.0day.today/exploit/27771"],"sources":[{"name":"OSV","id":"GHSA-c4v8-2hg8-jv77","modified":"2023-11-08T03:59:27.863274Z","url":"https://osv.dev/vulnerability/GHSA-c4v8-2hg8-jv77"}],"assessments":[{"source":"OSV","vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:N/A:H","score":4.5}],"products":[],"remediation":[],"kev":{"status":"not-listed","checkedAt":"2026-10-28T22:35:31.831Z"},"coverage":[{"source":"NVD","status":"not-checked"},{"source":"GHSA","status":"not-checked"},{"source":"EUVD","status":"not-checked"},{"source":"EPSS","status":"not-checked"}],"evidence":[{"source":"Exploit-DB","id":"42005","url":"https://www.exploit-db.com/exploits/42005","checkedAt":"2026-10-28T07:55:38.811Z"}]}