7.5

CVE-2021-43008

Exploit
Improper Access Control in Adminer versions 1.12.0 to 4.6.2 (fixed in version 4.6.3) allows an attacker to achieve Arbitrary File Read on the remote server by requesting the Adminer to connect to a remote MySQL database.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Adminer ≫ Adminer Version >= 1.12.0 <= 4.6.2
Debian ≫ Debian Linux Version9.0
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 83.64% 0.992
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:P/I:N/A:N
https://github.com/vrana/adminer/releases/tag/v4.6.3
Third Party Advisory
Release Notes
https://podalirius.net/en/cves/2021-43008/
Third Party Advisory
Exploit