CVE-2021-21311: Adminer Server-Side Request Forgery Vulnerability
Adminer contains a server-side request forgery vulnerability that, when exploited, allows a remote attacker to obtain potentially sensitive information.
Other sources
Adminer is an open-source database management in a single PHP file. In adminer from version 4.0.0 and before 4.7.9 there is a server-side request forgery vulnerability. Users of Adminer versions bundling all drivers (e.g. adminer.php) are affected. This is fixed in version 4.7.9.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Adminerto a version that resolves this vulnerability.Fixed in 4.7.9 - Operational
Discontinue use of the product if mitigations are unavailable.
Event History
Frequently Asked Questions
What is the severity of CVE-2021-21311?
CVE-2021-21311 is considered to be a medium severity vulnerability due to its impact on server-side request forgery.
How do I fix CVE-2021-21311?
To fix CVE-2021-21311, upgrade Adminer to version 4.7.9 or later.
Which versions of Adminer are affected by CVE-2021-21311?
Adminer versions from 4.0.0 to 4.7.8 are affected by CVE-2021-21311.
Is CVE-2021-21311 present in Debian Linux 9.0?
CVE-2021-21311 can be present in Debian Linux 9.0 if an affected version of Adminer is used.
What type of vulnerability is CVE-2021-21311?
CVE-2021-21311 is categorized as a server-side request forgery vulnerability.