Adminer and AdminerEvo Multiple Vulnerabilities
Adminer and AdminerEvo contain multiple vulnerabilities. Successful exploitation of these vulnerabilities could allow a remote, unauthenticated attacker to deny service, enumerate and access systems indirectly, upload arbitrary files, and execute arbitrary code. Adminer is no longer maintained. All of these vulnerabilities are fixed in AdminerEvo 4.8.4.
beschreibt (3)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2023-45195US | medium5.3 | — | ||
Adminer and AdminerEvo are vulnerable to SSRF via database connection fields. This could allow an unauthenticated remote attacker to enumerate or access systems the attacker would… | ||||
| CVE-2023-45196US | high7.5 | — | ||
Adminer and AdminerEvo allow an unauthenticated remote attacker to cause a denial of service by connecting to an attacker-controlled service that responds with HTTP redirects. The… | ||||
| CVE-2023-45197US | critical9.8 | — | ||
The file upload plugin in Adminer and AdminerEvo allows an attacker to upload a file with a table name of “..” to the root of the Adminer directory. The attacker can effectively gu… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (6)
- Kein Fix verfügbarAdminer
Adminer is no longer maintained. Fixed in AdminerEvo 4.8.4.
- Kein Fix verfügbarAdminer
Adminer is no longer maintained. Fixed in AdminerEvo 4.8.4.
- Kein Fix verfügbarAdminer
Adminer is no longer supported. Fixed in AdminerEvo 4.8.3.
- BehobenAdminerEvo
Fixed in AdminerEvo 4.8.3
https://github.com/adminerevo/adminerevo/releases/tag/v4.8.3 - BehobenAdminerEvo
Fixed in AdminerEvo 4.8.4.
https://github.com/adminerevo/adminerevo/releases/tag/v4.8.4 - BehobenAdminerEvo
Fixed in AdminerEvo 4.8.4.
https://github.com/adminerevo/adminerevo/releases/tag/v4.8.4
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan