CVE-2018-7667

Опубликовано: 05 мар. 2018

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Низкий

Описание

Adminer through 4.3.1 has SSRF via the server parameter.

Ссылки

http://hyp3rlinx.altervista.org/advisories/ADMINER-UNAUTHENTICATED-SERVER-SIDE-REQUEST-FORGERY.txt
Exploit
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2018/03/msg00014.html
Third Party Advisory
http://hyp3rlinx.altervista.org/advisories/ADMINER-UNAUTHENTICATED-SERVER-SIDE-REQUEST-FORGERY.txt
Exploit
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2018/03/msg00014.html
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:adminer:adminer:*:*:*:*:*:*:*:*

Версия до 4.3.1 (включая)

EPSS

Процентиль: 92%

0.0773

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-918

Связанные уязвимости

CVE-2018-7667

CVSS3: 9.8

ubuntu

почти 8 лет назад

Adminer through 4.3.1 has SSRF via the server parameter.

CVE-2018-7667

CVSS3: 9.8

debian

почти 8 лет назад

Adminer through 4.3.1 has SSRF via the server parameter.

openSUSE-SU-2018:0680-1

suse-cvrf

почти 8 лет назад

Security update for adminer

GHSA-43f8-p5w3-5m25

github

почти 5 лет назад

vrana/adminer vulnerable to SSRF by connecting to privileged ports

EPSS

Процентиль: 92%

0.0773

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-918