PT-2024-13225 · Unknown+2 · Adminerevo+2

Published 2024-06-24 · Updated 2025-10-15 · CVE-2023-45196

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions AdminerEvo versions prior to 4.8.4 Adminer (affected versions not specified)

Description The issue allows an unauthenticated remote attacker to cause a denial of service by connecting to an attacker-controlled service that responds with HTTP redirects. The denial of service is subject to PHP configuration limits.

Recommendations For AdminerEvo versions prior to 4.8.4, update to version 4.8.4 to resolve the issue. For Adminer, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

CVE-2023-45196

Affected Products

Adminer

Adminerevo

Debian

References · 12

• https://github.com/adminerevo/adminerevo/pull/102/commits/23e7cdc0a32b3739e13d19ae504be0fe215142b6 · Patch
• https://cve.org/CVERecord?id=CVE-2023-45196 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2023-45196 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-45196 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-45196 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-45196 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-45196 · Security Note
• https://osv.dev/vulnerability/CVE-2023-45196 · Vendor Advisory
• https://github.com/adminerevo/adminerevo/commit/bc44e5f676b3ff249acd97ed9835305469d55bfa · Note
• https://t.me/cvenotify/84250 · Telegram Post
• https://t.me/cvenotify/84337 · Telegram Post
• https://t.me/cveNotify/138788 · Telegram Post