CVE-2026-34384: CSRF in Admidio User Management

The primary impact of this CSRF vulnerability lies in the ability of an attacker to bypass the intended registration process and create new user accounts within the Admidio system. By crafting malicious links or requests, an attacker can trick a legitimate user into approving a registration request they did not initiate. This can lead to the creation of unauthorized accounts with potentially elevated privileges, depending on the Admidio configuration. The attacker could leverage these accounts for malicious purposes, such as data theft, system compromise, or further attacks within the network. The lack of CSRF protection on the approval actions (createuser, assignmember, assign_user) makes this vulnerability particularly concerning.

1. Reserved2026-03-27
2. Published2026-03-31
3. Modified2026-04-01
4. EPSS updated2026-04-08

The recommended mitigation for CVE-2026-34384 is to immediately upgrade Admidio to version 5.0.8 or later, which includes the necessary CSRF protection. If upgrading is not immediately feasible, consider implementing a Web Application Firewall (WAF) rule to block requests to the /modules/registration.php endpoint with the approve parameter in the GET request. Additionally, review and restrict access to the Admidio installation to minimize the potential attack surface. After upgrading, confirm the fix by attempting to trigger a registration approval via a crafted URL and verifying that the action is blocked or requires proper authentication.