Lucene search

K
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2023-45196
HistoryJun 24, 2024 - 9:15 p.m.

CVE-2023-45196

2024-06-2421:15:25
Debian Security Bug Tracker
security-tracker.debian.org
cve-2023-45196
unauthenticated remote attacker
denial of service
adminerevo
http redirects
php configuration limits
fixed vulnerability
unix

6.9 Medium

CVSS4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/SC:N/VI:N/SI:N/VA:L/SA:N/AU:Y

7.3 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

Adminer and AdminerEvo allow an unauthenticated remote attacker to cause a denial of service by connecting to an attacker-controlled service that responds with HTTP redirects. The denial of service is subject to PHP configuration limits.Β Adminer is no longer supported, but this issue was fixed in AdminerEvo version 4.8.4.

6.9 Medium

CVSS4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/SC:N/VI:N/SI:N/VA:L/SA:N/AU:Y

7.3 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

Related for DEBIANCVE:CVE-2023-45196