Lucene search
+L

1 matches found

OSV
OSV
added 2026/05/29 9:57 p.m.18 views

GHSA-RWJR-QJJ3-MQ2F Admidio module-administrator can delete or reorder categories owned by other modules via dead authorization check in `modules/categories.php`

Summary modules/categories.php checks that the supplied type parameter ANN, EVT, ROL, USF, … corresponds to a module the actor administers. The follow-up "is this specific category editable by me" check at lines 56-61 is dead code because it compares $getType a category-type code against mode nam...

6.5CVSS5.9AI score0.00235EPSS
SaveExploits0References2
Rows per page
Query Builder