CVE-2023-45196

CVSS V2 None CVSS V3 None

Description

Adminer and AdminerEvo allow an unauthenticated remote attacker to cause a denial of service by connecting to an attacker-controlled service that responds with HTTP redirects. The denial of service is subject to PHP configuration limits. Adminer is no longer supported, but this issue was fixed in AdminerEvo version 4.8.4.

Overview

CVE ID
CVE-2023-45196

Assigner
cisa-cg

Vulnerability Status
PUBLISHED

Published Version
2024-06-24T20:48:21.534Z

Last Modified Date
2024-06-24T20:48:21.534Z

Weakness Enumerations

CWE	URL
CWE-400	http://cwe.mitre.org/data/definitions/400.html

References

Reference URL	Reference Tags
https://github.com/adminerevo/adminerevo/pull/102/commits/23e7cdc0a32b3739e13d19ae504be0fe215142b6	patch

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2023-45196
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45196

History

Created	Old Value	New Value	Data Type	Notes
2024-06-26 15:40:34				Added to TrackCVE