~ / search / GHSA-x5r2-hj5c-8jx6

GHSA-x5r2-hj5c-8jx6

SSRF in adminer

Source: GitHub Advisory Database (reviewed) High CVE-2021-21311

Packages

EcosystemPackageAffectedFixed in
Packagist vrana/adminer < 4.7.9 4.7.9

Details

As written in the advisory (Markdown source, shown as plain text).

### Impact Users of Adminer versions bundling all drivers (e.g. `adminer.php`) are affected. ### Patches Patched by ccd2374b, included in version [4.7.9](https://github.com/vrana/adminer/releases/tag/v4.7.9). ### Workarounds * Use a single driver version (e.g. `adminer-mysql.php`). * Protect access to Adminer also by other means, e.g. by HTTP password, IP address limiting or by OTP [plugin](https://www.adminer.org/plugins/). ### References https://github.com/vrana/adminer/files/5957311/Adminer.SSRF.pdf ### For more information If you have any questions or comments about this advisory: * Comment at ccd2374b.

References

External links from the advisory. They lead to third-party sites.