CVE-2023-45196: Adminer and AdminerEvo denial of service via HTTP redirect
Adminer and AdminerEvo allow an unauthenticated remote attacker to cause a denial of service by connecting to an attacker-controlled service that responds with HTTP redirects. The denial of service is subject to PHP configuration limits. Adminer is no longer supported, but this issue was fixed in AdminerEvo version 4.8.4.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2023-45196?
CVE-2023-45196 is classified as a denial-of-service vulnerability.
How do I fix CVE-2023-45196?
To mitigate CVE-2023-45196, consider disabling unauthenticated access or restricting access to the Adminer and AdminerEvo services.
Who is affected by CVE-2023-45196?
CVE-2023-45196 affects users of Adminer and AdminerEvo versions below 4.8.4.
What does CVE-2023-45196 exploit?
CVE-2023-45196 exploits the PHP configuration limits by causing a denial of service through HTTP redirect responses.
Is Adminer still supported after CVE-2023-45196?
No, Adminer is no longer supported, which may leave users vulnerable to CVE-2023-45196.