CVE-2023-45196 | THREATINT

Assigner	cisa-cg
Reserved	2023-10-05
Published	2024-06-24
Updated	2024-08-02

Description

Adminer and AdminerEvo allow an unauthenticated remote attacker to cause a denial of service by connecting to an attacker-controlled service that responds with HTTP redirects. The denial of service is subject to PHP configuration limits. Adminer is no longer supported, but this issue was fixed in AdminerEvo version 4.8.4.

MEDIUM: 6.9

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/AU:Y

Product status

Default status

unknown

Any version

affected

cpe:2.3:a:adminer:adminer:0:*:*:*:*:*:*:*

affected

Default status

unknown

4.8.2 before 4.8.4

affected

cpe:2.3:a:adminerevo:adminerevo:0:*:*:*:*:*:*:* before cpe:2.3:a:adminerevo:adminerevo:4.8.4:*:*:*:*:*:*:*

affected

References

https://github.com/adminerevo/adminerevo/pull/102/commits/23e7cdc0a32b3739e13d19ae504be0fe215142b6 patch

cve.org CVE-2023-45196

nvd.nist.gov CVE-2023-45196

Download JSON

https://cve.threatint.com/CVE/CVE-2023-45196

Support options

Helpdesk Telegram

Subscribe to our newsletter to learn more about our work.