CVE-2023-45195

CVSS V2 None CVSS V3 None

Description

Adminer and AdminerEvo are vulnerable to SSRF via database connection fields. This could allow an unauthenticated remote attacker to enumerate or access systems the attacker would not otherwise have access to. Adminer is no longer supported, but this issue was fixed in AdminerEvo version 4.8.4.

Overview

CVE ID
CVE-2023-45195

Assigner
cisa-cg

Vulnerability Status
PUBLISHED

Published Version
2024-06-24T21:06:09.735Z

Last Modified Date
2024-06-24T21:06:09.735Z

Weakness Enumerations

CWE	URL
CWE-918	http://cwe.mitre.org/data/definitions/918.html

References

Reference URL	Reference Tags
https://github.com/adminerevo/adminerevo/pull/102/commits/18f3167bbcbec3bc746f62db72e016aa99144efc	patch

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2023-45195
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45195

History

Created	Old Value	New Value	Data Type	Notes
2024-06-26 15:40:31				Added to TrackCVE