Lucene search
+L

6 matches found

Github Security Blog
Github Security Blog
added 2026/05/29 10:05 p.m.29 views

Admidio: IDOR in documents-files.php allows cross-folder file rename and description changes by unauthorized uploaders

Summary modules/documents-files.php mode filerenamesave shares the same root-cause shape as the cross-folder move bug 05-documents-cross-folder-move-idor.md: the top-level rights check at lines 79-89 validates hasUploadRight on the URL parameter folderuuid, but the rename operation acts on fileuu...

6.5CVSS5.8AI score0.00175EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder