{"id":"GHSA-vmxg-wx6c-4f3r","aliases":["CVE-2023-3303"],"title":"Admidio Improper Access Control vulnerability","titleSource":"OSV","descriptionSource":"OSV","declaredSeverity":"LOW","description":"Admidio prior to 4.2.9 is vulnerable to Improper Access Control.","severity":"low","score":3.5,"published":"2023-06-23T15:30:43.000Z","modified":"2024-02-16T07:59:08.276Z","withdrawn":false,"knownExploited":false,"affected":[{"ecosystem":"Packagist","name":"admidio/admidio","sources":[{"name":"OSV · GHSA-vmxg-wx6c-4f3r","url":"https://osv.dev/vulnerability/GHSA-vmxg-wx6c-4f3r"}],"ranges":[{"events":[{"introduced":"0"},{"fixed":"4.2.9"}],"type":"ECOSYSTEM"}],"versions":["4.1.0","4.1.3","v4.2-Beta.1","v4.2-Beta.2","v4.2-Beta.3","v4.2.0","v4.2.1","v4.2.2","v4.2.3","v4.2.4","v4.2.5","v4.2.6","v4.2.7","v4.2.8"],"fixed":["4.2.9"]}],"sourceAffected":[],"references":["https://nvd.nist.gov/vuln/detail/CVE-2023-3303","https://github.com/admidio/admidio/commit/3d8bafaa4e9b7a314ffdf548622a8c7b38faee8a","https://github.com/admidio/admidio","https://huntr.dev/bounties/65d260cc-55a9-4e71-888d-cb2f66c071af"],"sources":[{"name":"OSV","id":"GHSA-vmxg-wx6c-4f3r","modified":"2024-02-16T07:59:08.276941Z","url":"https://osv.dev/vulnerability/GHSA-vmxg-wx6c-4f3r"}],"assessments":[{"source":"OSV","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N","score":3.5}],"products":[],"remediation":[],"kev":{"status":"not-listed","checkedAt":"2026-10-28T21:55:33.923Z"},"coverage":[{"source":"NVD","status":"not-checked"},{"source":"GHSA","status":"not-checked"},{"source":"EUVD","status":"not-checked"},{"source":"EPSS","status":"not-checked"}],"evidence":[]}