Lucene search
Veracode Vulnerability DatabaseVERACODE:29399HistoryFeb 15, 2021 - 9:04 a.m.
Server-Side Request Forgery (SSRF)
2021-02-1509:04:57
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5
0.021 Low
EPSS
Percentile
89.2%
vrana/adminer is vulnerable to Server-Side Request Forgery (SSRF). The vulnerability exists due to error response return argument not sanitized in the function rootQuery.
| CPE | Name | Operator | Version |
|---|---|---|---|
| vrana/adminer | le | v4.7.8 |
References
github.com/advisories/GHSA-x5r2-hj5c-8jx6
github.com/vrana/adminer/commit/ccd2374b0b12bd547417bf0dacdf153826c83351
github.com/vrana/adminer/files/5957311/Adminer.SSRF.pdf
github.com/vrana/adminer/security/advisories/GHSA-x5r2-hj5c-8jx6
lists.debian.org/debian-lts-announce/2021/03/msg00002.html
packagist.org/packages/vrana/adminer
Related
veracode
veracode
Server-side Request Forgery (SSRF)
2021-02-12 11:01:35
Server-Side Request Forgery (SSRF)
2021-02-15 04:54:38
githubexploit
githubexploit
Exploit for Server-Side Request Forgery in Adminer
2023-06-12 13:32:52
nessus
nessus
Debian DLA-2580-1 : adminer security update
2021-03-03 00:00:00
nuclei
nuclei
Adminer <4.7.9 - Server-Side Request Forgery
2022-03-31 19:40:06
debian
debian
[SECURITY] [DLA 2580-1] adminer security update
2021-03-02 19:41:17
cvelist
cvelist
CVE-2021-21311 SSRF in adminer
2021-02-11 20:55:15
osv
osv
adminer - security update
2021-03-03 00:00:00
CVE-2021-21311
2021-02-11 21:15:13
SSRF in adminer
2021-02-11 20:42:59
nvd
nvd
CVE-2021-21311
2021-02-11 21:15:13
prion
prion
Server side request forgery (ssrf)
2021-02-11 21:15:00
ubuntucve
ubuntucve
CVE-2021-21311
2021-02-11 00:00:00
github
github
SSRF in adminer
2021-02-11 20:42:59
openvas
openvas
Debian: Security Advisory (DLA-2580-1)
2021-03-03 00:00:00
Adminer 4.7.0 < 4.7.9 Multiple Vulnerabilities - Linux
2021-02-12 00:00:00
Adminer 4.7.0 < 4.7.9 Multiple Vulnerabilities - Windows
2021-02-12 00:00:00
cve
cve
CVE-2021-21311
2021-02-11 21:15:13
debiancve
debiancve
CVE-2021-21311
2021-02-11 21:15:13
ubuntu
ubuntu
Adminer vulnerabilities
2022-06-03 00:00:00