Vulnerabilities > CVE-2021-21311

CVSS 7.2 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

LOW

Integrity impact

LOW

Availability impact

NONE

network

low complexity

adminer

debian

NVD

Published: 2021-02-11

Updated: 2024-11-21

Summary

Adminer is an open-source database management in a single PHP file. In adminer from version 4.0.0 and before 4.7.9 there is a server-side request forgery vulnerability. Users of Adminer versions bundling all drivers (e.g. `adminer.php`) are affected. This is fixed in version 4.7.9.

Vulnerable Configurations

Part	Description	Count
Application	Adminer Adminer Adminer 4.0.0 Adminer Adminer 4.0.1 Adminer Adminer 4.0.2 Adminer Adminer 4.0.3 Adminer Adminer 4.1.0 Adminer Adminer 4.2.0 Adminer Adminer 4.2.1 Adminer Adminer 4.2.2 Adminer Adminer 4.2.3 Adminer Adminer 4.2.4 Adminer Adminer 4.2.5 Adminer Adminer 4.3.0 Adminer Adminer 4.3.1 Adminer Adminer 4.4.0 Adminer Adminer 4.5.0 Adminer Adminer 4.6.0 Adminer Adminer 4.6.1 Adminer Adminer 4.6.2 Adminer Adminer 4.6.3 Adminer Adminer 4.7.0 Adminer Adminer 4.7.1 Adminer Adminer 4.7.2 Adminer Adminer 4.7.3 Adminer Adminer 4.7.4 Adminer Adminer 4.7.5 Adminer Adminer 4.7.6 Adminer Adminer 4.7.7 Adminer Adminer 4.7.8 Adminer Adminer 4.7.9	29
OS	Debian Debian Debian Linux 9.0	1

Vulnerabilities > CVE-2021-21311 {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Vulnerabilities","item":"https://cyber.vumetric.com/vulns/"},{"@type":"ListItem","position":2,"name":"CVE-2021-21311"}]}

Summary

Vulnerable Configurations

References

Vulnerabilities > CVE-2021-21311