← CVE Intelligence

CVE-2023-45195

Adminer and AdminerEvo SSRF PUBLISHED

Description (CNA)

Adminer and AdminerEvo are vulnerable to SSRF via database connection fields. This could allow an unauthenticated remote attacker to enumerate or access systems the attacker would not otherwise have access to. Adminer is no longer supported, but this issue was fixed in AdminerEvo version 4.8.4.

Affected (CNA)

Vendor / productVersions
Adminer / Admineraffected 0 through *; affected cpe:2.3:a:adminer:adminer:0:*:*:*:*:*:*:* through cpe:2.3:a:adminer:adminer:*:*:*:*:*:*:*:*
AdminerEvo / AdminerEvoaffected 4.8.2 before 4.8.4; affected cpe:2.3:a:adminerevo:adminerevo:0:*:*:*:*:*:*:* before cpe:2.3:a:adminerevo:adminerevo:4.8.4:*:*:*:*:*:*:*

CWE

CWE-918

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.