vrana/adminer · Security
Adminer file disclosure vulnerability
- GHSA ID
- GHSA-97h7-mf38-g9mf
- Severity
- high
- Published
- Updated
- CVSS
- 7.5 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- CVSS v3
- 7.5 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Description
Adminer script versions up to 4.6.2 contains file disclosure vulnerability.
CWEs
- CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
References
- https://github.com/vrana/adminer/commit/c564a8ef5095d26b1d7f2ebab4dc3c3516bc0c7b ↗
- https://github.com/FriendsOfPHP/security-advisories/blob/master/vrana/adminer/2019-01-20.yaml ↗
- https://sansec.io/research/adminer-4.6.2-file-disclosure-vulnerability ↗
- https://github.com/advisories/GHSA-97h7-mf38-g9mf ↗