Lucene search

K
osvGoogleOSV:GHSA-RXFQ-3VPC-VV72
HistoryApr 06, 2022 - 12:01 a.m.

Files or Directories Accessible to External Parties in Adminer

2022-04-0600:01:33
Google
osv.dev
16
adminer
improper access control
arbitrary file read
remote mysql database
security issue

EPSS

0.002

Percentile

55.9%

Improper Access Control in Adminer versions 1.12.0 to 4.6.2 (fixed in version 4.6.3) allows an attacker to achieve Arbitrary File Read on the remote server by requesting the Adminer to connect to a remote MySQL database.