EPSS
Percentile
55.9%
Improper Access Control in Adminer versions 1.12.0 to 4.6.2 (fixed in version 4.6.3) allows an attacker to achieve Arbitrary File Read on the remote server by requesting the Adminer to connect to a remote MySQL database.
github.com/vrana/adminer
github.com/vrana/adminer/releases/tag/v4.6.3
lists.debian.org/debian-lts-announce/2022/05/msg00012.html
nvd.nist.gov/vuln/detail/CVE-2021-43008
podalirius.net/en/cves/2021-43008
sansec.io/research/adminer-4.6.2-file-disclosure-vulnerability
www.adminer.org