Authenticated SQL Injection Vulnerability in Admidio User Management Solution

CVE-2025-62617

What is CVE-2025-62617?

Admidio, an open-source user management solution, is susceptible to an authenticated SQL injection vulnerability that impacts its member assignment data retrieval functionality. Users with the permission to assign members to roles can exploit this flaw to execute arbitrary SQL commands. This exploitation can result in unauthorized access to the database, enabling attackers to read, modify, or delete any stored data. The issue has been mitigated with the release of version 4.3.17, which addresses the vulnerability.

References