Skip to content
OpenAdvisories
High DLA-3002-1 1 CVE

adminer - security update

Published May 13, 2022 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 9 adminer 4.2.5-3+deb9u3

Vulnerabilities 1

  • High 7.5
    CVE-2021-43008 Public exploit EPSS 14%

    Files or Directories Accessible to External Parties in Adminer

    Improper Access Control in Adminer versions 1.12.0 to 4.6.2 (fixed in version 4.6.3) allows an attacker to achieve Arbitrary File Read on the remote server by requesting the Adminer to connect to a remote MySQL database.

    adminer adminer vrana/adminer Debian Ubuntu Packagist