Riskcovery

CVE-2023-45197

Adminer and AdminerEvo vulnerable to directory traversal and file upload

State
Published
Severity
9.2 Critical
Published
Jun 21, 2024
Updated
Aug 2, 2024
Reserved
Oct 5, 2023

Read the record on cve.org

Description

The file upload plugin in Adminer and AdminerEvo allows an attacker to upload a file with a table name of “..” to the root of the Adminer directory. The attacker can effectively guess the name of the uploaded file and execute it. Adminer is no longer supported, but this issue was fixed in AdminerEvo version 4.8.3.

Scores

CVSSScoreVectorSource
4.09.2 CriticalCVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/AU:Ycisa-cg

Weaknesses

  • CWE-434 Unrestricted Upload of File with Dangerous Type
  • CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Affected Products

ProductVersions
AdminerAdminer
  • all versionsAffected
  • cpe:2.3:a:adminer:adminer:0:*:*:*:*:*:*:* through cpe:2.3:a:adminer:adminer:*:*:*:*:*:*:*:*Affected
AdminerEvoAdminerEvo
  • 4.8.2 to before 4.8.3Affected
  • cpe:2.3:a:adminerevo:adminerevo:0:*:*:*:*:*:*:* to before cpe:2.3:a:adminerevo:adminerevo:4.8.3:*:*:*:*:*:*:*Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.