CVE-2026-47232
MediumCVSS 4.3Summary
Admidio prior to version 5.0.10 has a CSRF vulnerability in the `mode=export` action in `modules/sso/keys.php`, which exports a PKCS#12 bundle with the private key and certificate. The CSRF validation line is commented out, allowing a forged cross-site POST from an administrator session to trigger private key export without a valid form token.
Risk Assessment
An attacker could exfiltrate the private key and certificate, potentially leading to impersonation of SSO services and confidentiality breach.
Recommendation
Upgrade Admidio to version 5.0.10 or later, which includes a fix.
Original NVD description (English source)
Admidio is an open-source user management solution. Prior to version 5.0.10, the sensitive `mode=export` action in `modules/sso/keys.php` exports a PKCS#12 bundle containing the configured private key and certificate, but the CSRF validation line is commented out. A forged cross-site POST from an administrator session can therefore trigger private key export without a valid form token. Version 5.0.10 contains a fix.