Packagist admidio/admidio

Name: Packagist admidio/admidio
Brand: Packagist

ProduktUS

pkg:composer/admidio/admidio

Ein im Bedrohungsgraphen erfasstes Produkt; die Schwachstellen unten betreffen es bekanntermaßen.

KEV-gelistet

EPSS ≥ 10%

kritisch

nach Schweregrad

0critical6high8medium2low

aktualisiert 2026-10-28

Schwachstellen (50)

Zugehörige CVEs.

Sortierung

ID	Schweregrad	EPSS	ausnutzbar	behoben	veröffentlicht	betroffen
CVE-2017-8382US	medium4.5	2.63% (85th)	Exploit	4.1-Beta.1	2017-05-16	< 4.1-Beta.1
CVE-2024-38529US	high8.8	1.24% (69th)	—	4.3.10	2024-07-29	< 4.3.10
CVE-2026-32756US	—	1.02% (63rd)	—	5.0.7	2026-03-20	< 5.0.7
CVE-2022-0991US	high7.1	1.01% (63rd)	—	4.1.9	2022-03-19	< 4.1.9
CVE-2023-3692US	high7.2	1.01% (63rd)	—	4.2.10	2023-07-16	< 4.2.10
CVE-2024-37906US	high8.8	0.93% (60th)	—	4.3.9	2024-07-29	< 4.3.9
CVE-2023-47380US	medium6.1	0.70% (53rd)	—	4.2.13	2023-11-22	< 4.2.13
CVE-2023-4190US	medium6.5	0.60% (49th)	—	4.2.11	2023-08-06	< 4.2.11
CVE-2026-34381US	—	0.57% (47th)	—	5.0.8	2026-03-31	5.0.0 → 5.0.8
CVE-2022-23896US	medium5.4	0.57% (47th)	—	4.1.3	2022-06-28	< 4.1.3
CVE-2024-47836US	medium4.3	0.51% (43rd)	—	4.3.12	2024-10-16	< 4.3.12
CVE-2023-3109US	medium5.4	0.48% (41st)	—	4.2.8	2023-06-05	< 4.2.8
CVE-2023-3302US	high7.8	0.46% (40th)	—	4.2.9	2023-06-23	< 4.2.9
CVE-2026-32812US	—	0.44% (38th)	—	5.0.7	2026-03-20	5.0.0 → 5.0.7
CVE-2025-62617US	—	0.43% (37th)	—	4.3.17	2025-10-22	< 4.3.17
CVE-2023-3303US	low3.5	0.42% (36th)	—	4.2.9	2023-06-23	< 4.2.9
CVE-2023-3304US	medium5.4	0.41% (36th)	—	4.2.9	2023-06-23	< 4.2.9
CVE-2026-41656US	—	0.36% (30th)	—	5.0.9	2026-05-07	< 5.0.9
CVE-2026-47231US	—OT erhöht	0.35% (28th)	—	5.0.10	2026-08-12	< 5.0.10
CVE-2026-47226US	—OT erhöht	0.35% (28th)	—	5.0.10	2026-08-12	< 5.0.10
CVE-2026-32817US	—OT erhöht	0.34% (27th)	—	5.0.7	2026-03-20	5.0.0 → 5.0.7
CVE-2026-47227US	—OT erhöht	0.33% (26th)	—	5.0.10	2026-08-12	< 5.0.10
CVE-2026-41671US	—	0.32% (25th)	—	5.0.9	2026-05-07	< 5.0.9
CVE-2026-41657US	—OT erhöht	0.32% (25th)	—	5.0.9	2026-05-07	< 5.0.9
CVE-2026-47233US	—OT erhöht	0.31% (24th)	—	5.0.10	2026-08-12	< 5.0.10
CVE-2026-41655US	—	0.31% (23rd)	—	5.0.9	2026-05-07	< 5.0.9
CVE-2026-47230US	—OT erhöht	0.30% (22nd)	—	5.0.10	2026-08-12	< 5.0.10
CVE-2026-41660US	—OT erhöht	0.30% (22nd)	—	5.0.9	2026-05-07	< 5.0.9
CVE-2026-32813US	—	0.29% (21st)	—	5.0.7	2026-03-20	< 5.0.7
CVE-2026-41662US	—	0.29% (21st)	—	5.0.9	2026-05-07	< 5.0.9
CVE-2026-41670US	—	0.28% (20th)	—	5.0.9	2026-05-07	< 5.0.9
CVE-2026-30927US	medium5.4	0.27% (19th)	—	5.0.6	2026-03-10	< 5.0.6
CVE-2026-41659US	—	0.26% (17th)	—	5.0.9	2026-05-07	< 5.0.9
CVE-2026-41658US	—OT erhöht	0.24% (15th)	—	5.0.9	2026-05-07	< 5.0.9
CVE-2026-42194US	—	0.24% (14th)	—	5.0.9	2026-05-07	< 5.0.9
CVE-2026-32818US	—OT erhöht	0.24% (14th)	—	5.0.7	2026-03-19	5.0.0 → 5.0.7
CVE-2026-32757US	—	0.23% (14th)	—	5.0.7	2026-03-20	< 5.0.7
CVE-2026-41669US	—	0.19% (9th)	—	5.0.9	2026-05-07	< 5.0.9
CVE-2026-41661US	—	0.18% (8th)	—	5.0.9	2026-05-07	< 5.0.9
CVE-2026-47234US	—	0.17% (7th)	—	5.0.10	2026-08-12	< 5.0.10
CVE-2026-34384US	high7.3	0.17% (6th)	—	5.0.8	2026-03-31	< 5.0.8
CVE-2026-53760US	—	0.17% (6th)	—	kein Fix	2026-09-04	≤ 5.0.11
CVE-2026-47228US	—	0.16% (5th)	—	5.0.10	2026-08-12	< 5.0.10
CVE-2026-32755US	—	0.15% (5th)	—	5.0.7	2026-03-19	< 5.0.7
CVE-2026-47229US	—	0.14% (3rd)	—	5.0.10	2026-08-12	< 5.0.10
CVE-2026-32816US	—	0.14% (3rd)	—	5.0.7	2026-03-19	5.0.0 → 5.0.7
CVE-2026-34383US	low3.5	0.13% (3rd)	—	5.0.8	2026-03-31	< 5.0.8
CVE-2026-47232US	—	0.13% (3rd)	—	5.0.10	2026-08-12	< 5.0.10
CVE-2026-34382US	—	0.12% (2nd)	—	5.0.8	2026-03-31	5.0.0 → 5.0.8
CVE-2026-41663US	—	0.12% (2nd)	—	5.0.9	2026-05-07	< 5.0.9

Schwächen (8)

Die Schwächeklassen (CWEs), die die meisten dieser CVEs teilen.

CWE-352Cross-Site Request Forgery (CSRF)11 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')6 CVEs
CWE-639Authorization Bypass Through User-Controlled Key5 CVEs
CWE-862Missing Authorization5 CVEs
CWE-863Incorrect Authorization5 CVEs
CWE-284Improper Access Control3 CVEs
CWE-434Unrestricted Upload of File with Dangerous Type3 CVEs
CWE-89Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')3 CVEs

Datenquellen (1)

Welche Quellen diesen Datensatz belegen und wann.

USOSV.dev50 CVEs

scry

Produkte tragen bekannte Schwachstellen, sobald sie im Internet exponiert sind. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan