GHSA-WWG8-6FFR-H4Q2: GHSA-wwg8-6ffr-h4q2: Cross-Site Request Forgery in Admidio Role Management

Admidio versions 5.0.0 through 5.0.6 contain a CSRF vulnerability (CVSS 5.7) in the role management module, where missing anti-CSRF token validation allows attackers to delete or modify organizational roles by tricking authenticated administrators. A proof-of-concept exploit is available, and the issue is fixed in version 5.0.7.