CVE-2023-45195: Adminer and AdminerEvo SSRF
Adminer and AdminerEvo are vulnerable to SSRF via database connection fields. This could allow an unauthenticated remote attacker to enumerate or access systems the attacker would not otherwise have access to. Adminer is no longer supported, but this issue was fixed in AdminerEvo version 4.8.4.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2023-45195?
CVE-2023-45195 is considered a medium to high severity vulnerability due to its potential for unauthorized information access.
How do I fix CVE-2023-45195?
To fix CVE-2023-45195, upgrade to AdminerEvo version 4.8.4 or later, as older versions are vulnerable.
Who is affected by CVE-2023-45195?
CVE-2023-45195 affects users of Adminer and AdminerEvo with versions prior to 4.8.4.
What type of vulnerability is CVE-2023-45195?
CVE-2023-45195 is a Server-Side Request Forgery (SSRF) vulnerability.
Can CVE-2023-45195 be exploited remotely?
Yes, CVE-2023-45195 can be exploited remotely by an unauthenticated attacker.