CVE-2023-45196

Adminer and AdminerEvo allow an unauthenticated remote attacker to cause a denial of service by connecting to an attacker-controlled service that responds with HTTP redirects. The denial of service is subject to PHP configuration limits. Adminer is no longer supported, but this issue was fixed in AdminerEvo version 4.8.4.

Database specific

{
    "cna_assigner": "cisa-cg",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/45xxx/CVE-2023-45196.json",
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "last_affected": "*"
                },
                {
                    "introduced": "cpe:2.3:a:adminer:adminer:0:*:*:*:*:*:*:*"
                },
                {
                    "last_affected": "cpe:2.3:a:adminer:adminer:*:*:*:*:*:*:*:*"
                },
                {
                    "introduced": "cpe:2.3:a:adminerevo:adminerevo:0:*:*:*:*:*:*:*"
                },
                {
                    "fixed": "cpe:2.3:a:adminerevo:adminerevo:4.8.4:*:*:*:*:*:*:*"
                }
            ],
            "source": "AFFECTED_FIELD"
        }
    ],
    "cwe_ids": [
        "CWE-400"
    ]
}

References

Affected packages

Git / github.com/adminerevo/adminerevo

Affected ranges

Type

GIT

Repo

https://github.com/adminerevo/adminerevo

Events

Introduced

d2c4d437a122b81c93d6ab9d8a806ccc9eba95ab

Fixed

f1e13af9252bfd88d816ef72593513c13adf1dd5

Database specific

{
    "cpe": "cpe:2.3:a:adminerevo:adminerevo:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "4.8.2"
        },
        {
            "fixed": "4.8.4"
        },
        {
            "introduced": "0"
        }
    ],
    "source": [
        "AFFECTED_FIELD",
        "CPE_RANGE"
    ]
}

Affected versions

v4.*

v4.8.2

v4.8.3

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-45196.json"