CVE-2023-45195CWE-918

Adminer and AdminerEvo SSRF

Medium · published June 24, 2024

CVSS v4.0
6.9
EPSS
0%
Percentile
34.3
In the wild
Unconfirmed
What it is

Adminer and AdminerEvo are vulnerable to SSRF via database connection fields. This could allow an unauthenticated remote attacker to enumerate or access systems the attacker would not otherwise have access to. Adminer is no longer supported, but this issue was fixed in AdminerEvo version 4.8.4.

The record
Technical detail
CVSS v4.0
6.9 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:N/SA:N/AU:Y
EPSS
0.00412 · 34.3th percentile
Weakness
CWE-918 · Server-Side Request Forgery (SSRF)
Published
2024-06-24T21:06Z
EPSS history
Timeline
  • 24 JUN 21:06Z
    Adminer and AdminerEvo SSRF
    cvelistv5