PT-2024-40215 · Adminer · Adminer

Published 2024-06-07 · Updated 2024-06-07

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Adminer script versions up to 4.6.2

Description: The issue concerns a file disclosure vulnerability.

Recommendations: For versions up to 4.6.2, update to a version later than 4.6.2 to resolve the issue.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

GHSA-97H7-MF38-G9MF

Affected Products

Adminer

References · 5

• https://osv.dev/vulnerability/GHSA-97h7-mf38-g9mf · Vendor Advisory
• https://github.com/vrana/adminer · Note
• https://github.com/vrana/adminer/commit/c564a8ef5095d26b1d7f2ebab4dc3c3516bc0c7b · Note
• https://github.com/FriendsOfPHP/security-advisories/blob/master/vrana/adminer/2019-01-20.yaml · Note
• https://sansec.io/research/adminer-4.6.2-file-disclosure-vulnerability · Note