CyberRota Analysis
AI-GeneratedAdmidio versions prior to 5.0.11 are vulnerable to an authentication bypass in the forum module when set to login-only mode, which allows unauthenticated users to access and read forum topics and posts. This flaw compromises the confidentiality of forum content, potentially exposing sensitive information. Organizations using Admidio should prioritize patching to mitigate the risk of unauthorized access to their forum data.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Admidio before 5.0.11 contains an authentication bypass vulnerability in the forum module when configured in login-only mode. The access control logic in modules/forum.php fails to validate the login-only configuration state, allowing unauthenticated attackers to read forum topics and posts by directly accessing the module with read-only parameters.