CVE-2023-45195

Adminer and AdminerEvo are vulnerable to SSRF via database connection fields. This could allow an unauthenticated remote attacker to enumerate or access systems the attacker would not otherwise have access to. Adminer is no longer supported, but this issue was fixed in AdminerEvo version 4.8.4.

Database specific

{
    "cna_assigner": "cisa-cg",
    "cwe_ids": [
        "CWE-918"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/45xxx/CVE-2023-45195.json",
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "last_affected": "*"
                },
                {
                    "introduced": "cpe:2.3:a:adminer:adminer:0:*:*:*:*:*:*:*"
                },
                {
                    "last_affected": "cpe:2.3:a:adminer:adminer:*:*:*:*:*:*:*:*"
                },
                {
                    "introduced": "cpe:2.3:a:adminerevo:adminerevo:0:*:*:*:*:*:*:*"
                },
                {
                    "fixed": "cpe:2.3:a:adminerevo:adminerevo:4.8.4:*:*:*:*:*:*:*"
                }
            ],
            "source": "AFFECTED_FIELD"
        }
    ]
}

References

Affected packages

Git / github.com/adminerevo/adminerevo

Affected ranges

Type

GIT

Repo

https://github.com/adminerevo/adminerevo

Events

Introduced

d2c4d437a122b81c93d6ab9d8a806ccc9eba95ab

Fixed

f1e13af9252bfd88d816ef72593513c13adf1dd5

Database specific

Show details

{
    "cpe": "cpe:2.3:a:adminerevo:adminerevo:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "4.8.2"
        },
        {
            "fixed": "4.8.4"
        },
        {
            "introduced": "0"
        }
    ],
    "source": [
        "AFFECTED_FIELD",
        "CPE_RANGE"
    ]
}

Affected versions

v4.*

v4.8.2

v4.8.3

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-45195.json"