CVE-2018-7667
Adminer through 4.3.1 has SSRF via the server parameter.
Kaynağa göre önem derecesi
Trivy'nin kendi etiketi CRITICAL. Kritik diyenler: NVD. Daha düşük diyenler: GHSA (orta), Ubuntu (orta).
Açıklama
Adminer through 4.3.1 has SSRF via the server parameter.
Etkilenen paketler ve düzeltilmiş sürümler
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| composer::GitHub Security Advisory Composer | vrana/adminer | 4.7.8 |
| debian 11 | adminer | 4.5.0-1 |
| debian 12 | adminer | 4.5.0-1 |
| debian 13 | adminer | 4.5.0-1 |
| debian 14 | adminer | 4.5.0-1 |
| debian 7 | adminer | 3.3.3-1+deb7u1 |
| debian 8 | adminer | 3.3.3-1+deb8u1 |
| debian 9 | adminer | 4.2.5-3+deb9u1 |
| echo | adminer | 4.5.0-1 |
| ubuntu 14.04 | adminer | 3.3.3-1+deb7u1build0.14.04.1 |
Referanslar
- http://hyp3rlinx.altervista.org/advisories/ADMINER-UNAUTHENTICATED-SERVER-SIDE-REQUEST-FORGERY.txt
- https://github.com/vrana/adminer/commit/35bfaa75
- https://github.com/vrana/adminer/security/advisories/GHSA-43f8-p5w3-5m25
- https://gusralph.info/adminer-ssrf-bypass-cve-2018-7667
- https://lists.debian.org/debian-lts-announce/2018/03/msg00014.html
- https://sourceforge.net/p/adminer/bugs-and-features/769
- https://www.cve.org/CVERecord?id=CVE-2018-7667