返回 CVE 浏览器

CVE-2021-21311

Known Exploited (CISA KEV)HIGH

7.2

CVSS Severity Score

EPSS Score54.1920%

EPSS Percentile86.13th

Published2021年2月11日

Last Modified2025年10月24日

Vulnerability Description

Adminer is an open-source database management in a single PHP file. In adminer from version 4.0.0 and before 4.7.9 there is a server-side request forgery vulnerability. Users of Adminer versions bundling all drivers (e.g. `adminer.php`) are affected. This is fixed in version 4.7.9.

Affected Platforms (CPE)

📦

Adminer

Adminer

>= 4.0.0 and < 4.7.9

💻

Debian

Debian Linux

= 9.0

References & Advisories

🔗 https://github.com/vrana/adminer/commit/ccd2374b0b12bd547417bf0dacdf153826c83351

🔗 https://github.com/vrana/adminer/files/5957311/Adminer.SSRF.pdf

🔗 https://github.com/vrana/adminer/security/advisories/GHSA-x5r2-hj5c-8jx6

🔗 https://lists.debian.org/debian-lts-announce/2021/03/msg00002.html

🔗 https://packagist.org/packages/vrana/adminer

🔗 https://github.com/vrana/adminer/commit/ccd2374b0b12bd547417bf0dacdf153826c83351

🔗 https://github.com/vrana/adminer/files/5957311/Adminer.SSRF.pdf

🔗 https://github.com/vrana/adminer/security/advisories/GHSA-x5r2-hj5c-8jx6

相关漏洞威胁

CVE-2021-3267110.0

Flarum is a forum software for building communities. Flarum's translation system allowed for string inputs to be converted into HT...

CVE-2021-4127710.0

Metabase is an open source data analytics platform. In affected versions a security issue has been discovered with the custom GeoJ...

CVE-2020-677910.0

Use of Hard-coded Credentials in the database of Bosch FSM-2500 server and Bosch FSM-5000 server up to and including version 5.2 a...

CVE-1999-060310.0

In Windows NT, an inappropriate user is a member of a group, e.g. Administrator, Backup Operators, Domain Admins, Domain Guests, P...