Security Advisory

CVE-2023-45195

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2024-06-24 21:06:09
Last updated 2024-08-02 20:14:19
Assigner cisa-cg
CVSS score 6.9
State PUBLISHED

Description

Adminer and AdminerEvo are vulnerable to SSRF via database connection fields. This could allow an unauthenticated remote attacker to enumerate or access systems the attacker would not otherwise have access to. Adminer is no longer supported, but this issue was fixed in AdminerEvo version 4.8.4.