Access Control Flaws in Admidio User Management Solution

CVE-2026-47231

What is CVE-2026-47231?

Admidio, an open-source user management solution, has a vulnerability that allows unauthorized file movements between folders. Prior to version 5.0.10, the system failed to properly enforce upload rights on source folders, allowing users with permission to upload in one folder to move files from any other folder, including private ones. This oversight compromises the confidentiality of files and may lead to unauthorized access to sensitive information. The vulnerability is addressed in version 5.0.10, ensuring that rights are checked appropriately for both the source and destination folders.

References