Skip to content
OpenAdvisories

Package · Debian

adminer

25 known vulnerabilities.

1 result · Clear filters · Feed

  • Low 2.3

    Adminer before 5.5.1 X-Forwarded-Prefix Backslash Bypass

    Adminer 4.6.0 through 5.5.0 (fixed in 5.5.1) contains an incomplete fix for a prior X-Forwarded-Prefix vulnerability (GHSA-8478-xrj3-h9c2). The validation guard (bootstrap.inc.php) only rejects prefixes matching ^/[^/], blocking //evil.com but allowing values…