This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page. View CVE-2021-43008 →

DEBIAN-CVE-2021-43008

Improper Access Control in Adminer versions 1.12.0 to 4.6.2 (fixed in version 4.6.3) allows an attacker to achieve Arbitrary File Read on the remote s...

Original description

The description as published by the source.

Improper Access Control in Adminer versions 1.12.0 to 4.6.2 (fixed in version 4.6.3) allows an attacker to achieve Arbitrary File Read on the remote server by requesting the Adminer to connect to a remote MySQL database.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Affected packages

Debian:12 adminer

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.3-1"}]}]

Debian:13 adminer

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.3-1"}]}]

Debian:14 adminer

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.3-1"}]}]

References

advisory security-tracker.debian.org