CVE-2026-47232 in Admidio
Summary
by MITRE • 08/12/2026
Admidio is an open-source user management solution. Prior to version 5.0.10, the sensitive `mode=export` action in `modules/sso/keys.php` exports a PKCS#12 bundle containing the configured private key and certificate, but the CSRF validation line is commented out. A forged cross-site POST from an administrator session can therefore trigger private key export without a valid form token. Version 5.0.10 contains a fix.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.
Analysis
by VulDB Data Team • 08/12/2026
The vulnerability in Admidio affects versions prior to 5.0.10 and stems from a critical flaw in the single sign-on module's key management functionality. The sensitive `mode=export` action located in `modules/sso/keys.php` exposes a private key and certificate bundle in PKCS#12 format without proper authentication verification. This represents a significant security risk as it allows unauthorized extraction of cryptographic materials that could compromise system integrity and confidentiality.
The technical flaw manifests through a missing Cross-Site Request Forgery validation mechanism within the export functionality. The CSRF protection line that should validate form tokens has been commented out, rendering the action vulnerable to exploitation through forged cross-site POST requests. This design flaw directly violates security best practices and creates an attack surface where malicious actors can leverage existing administrator sessions to perform unauthorized key exports.
The operational impact of this vulnerability extends beyond simple privilege escalation as it provides attackers with access to private cryptographic keys that are essential for maintaining secure communications and authentication processes. When an authenticated administrator visits a malicious site or clicks on a crafted link, the attacker can silently trigger the export process without requiring additional authentication factors. This makes the vulnerability particularly dangerous in environments where administrators frequently browse untrusted websites or where social engineering attacks are common.
The security implications align with CWE-352, which describes Cross-Site Request Forgery vulnerabilities that allow attackers to perform unauthorized actions on behalf of authenticated users. Additionally, this flaw maps to ATT&CK technique T1552.001 for Unsecured Credentials and T1078.004 for Valid Accounts, as it leverages existing administrator sessions to extract sensitive cryptographic material. The vulnerability represents a critical weakness in the application's session management and input validation mechanisms.
Mitigation strategies should focus on implementing proper CSRF protection mechanisms including token validation, origin checking, and referer header verification. Organizations should immediately upgrade to version 5.0.10 or later where the fix has been implemented. Administrators should also review their current key management practices and consider implementing additional security controls such as role-based access restrictions for export functionality, periodic key rotation schedules, and monitoring for unauthorized export attempts. The fix in version 5.0.10 restores proper CSRF validation, ensuring that all export requests must contain valid tokens before proceeding with the private key bundle generation.