Vulnerabilities > CVE-2021-21311 - Server-Side Request Forgery (SSRF) vulnerability in multiple products

CVSS 7.2 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

LOW

Integrity impact

LOW

Availability impact

NONE

network

low complexity

adminer

debian

CWE-918

NVD

Published: 2021-02-11

Updated: 2021-06-24

Summary

Adminer is an open-source database management in a single PHP file. In adminer from version 4.0.0 and before 4.7.9 there is a server-side request forgery vulnerability. Users of Adminer versions bundling all drivers (e.g. `adminer.php`) are affected. This is fixed in version 4.7.9.

Vulnerable Configurations

Part	Description	Count
Application	Adminer Adminer Adminer 4.0.0 Adminer Adminer 4.0.1 Adminer Adminer 4.0.2 Adminer Adminer 4.0.3 Adminer Adminer 4.1.0 Adminer Adminer 4.2.0 Adminer Adminer 4.2.1 Adminer Adminer 4.2.2 Adminer Adminer 4.2.3 Adminer Adminer 4.2.4 Adminer Adminer 4.2.5 Adminer Adminer 4.3.0 Adminer Adminer 4.3.1 Adminer Adminer 4.4.0 Adminer Adminer 4.5.0 Adminer Adminer 4.6.0 Adminer Adminer 4.6.1 Adminer Adminer 4.6.2 Adminer Adminer 4.6.3 Adminer Adminer 4.7.0 Adminer Adminer 4.7.1 Adminer Adminer 4.7.2 Adminer Adminer 4.7.3 Adminer Adminer 4.7.4 Adminer Adminer 4.7.5 Adminer Adminer 4.7.6 Adminer Adminer 4.7.7 Adminer Adminer 4.7.8	28
OS	Debian Debian Debian Linux 9.0	1

Common Weakness Enumeration (CWE)

CWE-918 - Server-Side Request Forgery (SSRF)

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References