GitHub Advisoryadvisory · Packagist

GHSA-rxfq-3vpc-vv72 Files or Directories Accessible to External Parties in Adminer

HIGH Published 2022-04-06 Modified 2022-04-22 Official page ↗
Aliases
CVE-2021-43008
Ecosystem
Packagist
Packages
vrana/adminer
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weaknesses
CWE-552
Reviewed
2022-04-22

Affected packages

• Packagist vrana/adminer: >= 1.12.0, < 4.6.3 → fixed in 4.6.3

Description

Improper Access Control in Adminer versions 1.12.0 to 4.6.2 (fixed in version 4.6.3) allows an attacker to achieve Arbitrary File Read on the remote server by requesting the Adminer to connect to a remote MySQL database.

Related

Alias · CVE (1)

  • CVE-2021-43008 Improper Access Control in Adminer versions 1.12.0 to 4.6.2 (fixed in version 4.6.3) allows an attacker to achieve Arbitrary File Read on… vulnerability

Weakness · CWE (1)

  • CWE-552 Files or Directories Accessible to External Parties weakness

References