PT-2026-67414 · Admidio · Admidio

Sondt99 · CVE-2026-69092 · Publicado 2026-08-03 · Atualizado 2026-08-03

NVD

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Admidio versions before 5.0.11 contain a reflected cross-site scripting vulnerability in the SSO/SAML endpoint that echoes unencoded exception messages to the HTTP response. Unauthenticated attackers can inject arbitrary JavaScript through SAML Issuer elements or LightSaml library parameters to execute code in users' browsers and hijack sessions.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2026-69092

Produtos afetados

Admidio

Referências · 3

• https://github.com/Admidio/admidio/security/advisories/GHSA-7jxv-38f3-6xgf · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2026-69092 · Nota de Segurança
• https://vulncheck.com/advisories/admidio-before-reflected-xss-via-sso-saml-endpoint · Nota