CVE-2023-45195
CVE-2023-45195 · Adminer and AdminerEvo SSRF
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Adminer and AdminerEvo are vulnerable to SSRF via database connection fields. This could allow an unauthenticated remote attacker to enumerate or access systems the attacker would not otherwise have access to. Adminer is no longer supported, but this issue was fixed in AdminerEvo version 4.8.4.
CVSS 6.9 · Medium · EPSS 0.4% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
adminer
- Versions
- ≥ 0: Affected (custom)
- ≥ cpe:2.3:a:adminer:adminer:0:*:*:*:*:*:*:*, ≤ cpe:2.3:a:adminer:adminer:*:*:*:*:*:*:*:*: Affected (cpe)
No fix published
adminerevo
- Versions
- ≥ 4.8.2, < 4.8.4: Affected (custom)
- ≥ cpe:2.3:a:adminerevo:adminerevo:0:*:*:*:*:*:*:*, < cpe:2.3:a:adminerevo:adminerevo:4.8.4:*:*:*:*:*:*:*: Affected (cpe)
Update to 4.8.4
adminer Debian:12
- Versions
- 4.8.1-1
- 4.8.1-2
- 4.8.1-4
- 5.1.0-1
- 5.2.1+dfsg-1
- 5.3.0+dfsg-1
- 5.4.0+dfsg-1
- 5.4.1+dfsg-1
- 5.4.2+dfsg-1
- 5.4.3+dfsg-1
- 5.4.4+dfsg-1
- 6.0.0-1
- 6.0.1-1
- 6.0.2-1
- 6.1.0-1
- 6.1.1-1
- 6.1.2-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
adminer Debian:13
- Affected ranges
- ECOSYSTEM: < 4.8.1-4
Update to 4.8.1-4
adminer Debian:14
- Affected ranges
- ECOSYSTEM: < 4.8.1-4
Update to 4.8.1-4
adminer Ubuntu:Pro:16.04:LTS
- Versions
- 4.2.1-1
- 4.2.1-1ubuntu1
- 4.2.1-1ubuntu1+esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
adminer Ubuntu:Pro:18.04:LTS
- Versions
- 4.3.1-2
- 4.5.0-1
- 4.6.1-1
- 4.6.2-1
- 4.6.2-1ubuntu0.1~esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
adminer Ubuntu:Pro:20.04:LTS
- Versions
- 4.7.2-1
- 4.7.4-1
- 4.7.5-1
- 4.7.6-1
- 4.7.6-1ubuntu0.1~esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
adminer Ubuntu:22.04:LTS
- Versions
- 4.7.9-2
- 4.8.1-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
adminer Ubuntu:24.04:LTS
- Versions
- 4.8.1-1
- 4.8.1-1ubuntu1
- 4.8.1-2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
adminer Ubuntu:25.10
- Versions
- 4.8.1-4
- 5.2.1+dfsg-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
adminer Ubuntu:26.10
- Versions
- 5.4.1+dfsg-1
- 5.4.2+dfsg-1
- 5.4.4+dfsg-1
- 6.0.0-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
adminer Ubuntu:26.04:LTS
- Versions
- 5.2.1+dfsg-1
- 5.3.0+dfsg-1
- 5.4.0+dfsg-1
- 5.4.1+dfsg-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published