Skip to main content

Files or Directories Accessible to External Parties

CVE-2021-43008

High
7.5/10

Summary

Improper Access Control in Adminer versions 1.12.0 through 4.6.2 allows an attacker to achieve Arbitrary File Read on the remote server by requesting the Adminer to connect to a remote MySQL database.

  • LOW
  • NETWORK
  • NONE
  • UNCHANGED
  • NONE
  • NONE
  • HIGH
  • NONE

CWE-552 - Files or Directories Accessible to External Parties

The product makes files or directories accessible to unauthorized actors, even though they should not be.

References

Advisory Timeline

  • Published