CVE-2026-47229

Admidio is an open-source user management solution. Prior to version 5.0.10, "modules/sso/clients.php" validates an "admcsrftoken" on every state-changing branch except "enable". The "enable" case loads the SAML or OIDC client by UUID, calls "$client-enable$enabled", and persists the new state wi...

CVE-2026-47229: Cross-Site Request Forgery (CSRF)

Admidio is an open-source user management solution. Prior to version 5.0.10, modules/sso/clients.php validates an admcsrftoken on every state-changing branch except enable. The enable case loads the SAML or OIDC client by UUID, calls $client-enable$enabled, and persists the new state with no toke...