vrana/adminer vulnerable to SSRF by connecting to privileged ports

CRITIQUE 9.8CVE-2018-7667 · GHSA-43f8-p5w3-5m25 · Published 05/03/2018 · updated 17/06/2026

En bref

CVE-2018-7667 est une vulnérabilité CRITIQUE (CVSS 9.8) touchant vrana/adminer, adminer (adminer).
Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 5.0%, plus élevée que 92.2% des vulnérabilités.
Correctif : mettre à jour vers 4.7.8 ou plus récent.

Package	Affected versions	Patched versions
vrana/adminer Packagist	`< 4.7.8`	`4.7.8`
adminer adminer	`≤ 4.3.1`	No fix yet

All users are affected.

Protect access to Adminer also by other means, e.g. by HTTP password, IP address limiting or by OTP plugin.

If you have any questions or comments about this advisory:

NVD description

Adminer through 4.3.1 has SSRF via the server parameter.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

Packagist

< 4.7.8

4.7.8

≤ 4.3.1

No fix yet

Description

All users are affected.

Protect access to Adminer also by other means, e.g. by HTTP password, IP address limiting or by OTP plugin.

If you have any questions or comments about this advisory:

NVD description

Adminer through 4.3.1 has SSRF via the server parameter.

Autres vulnérabilités de vrana/adminer

Tout voir →