High
adminer — security advisory
Improper Access Control in Adminer versions 1.12.0 to 4.6.2 (fixed in version 4.6.3) allows an attacker to achieve Arbitrary File Read on the remote server by requesting the Adminer to connect to a remote MySQL database.
- Products
- adminer
- Affected versions
- 4.2.1-1, 4.2.1-1ubuntu1, 4.2.1-1ubuntu1+esm1, 4.3.1-2, 4.5.0-1, 4.6.1-1, 4.6.2-1, 4.6.2-1ubuntu0.1~esm1, 4.7.2-1, 4.7.4-1, 4.7.5-1, 4.7.6-1, 4.7.6-1ubuntu0.1~esm1, 4.7.9-2, 4.8.1-1, 4.8.1-1ubuntu1, 4.8.1-2, 4.8.1-4, 5.2.1+dfsg-1, 5.3.0+dfsg-1, 5.4.0+dfsg-1, 5.4.1+dfsg-1, 5.4.2+dfsg-1, 5.4.4+dfsg-1, 6.0.0-1
- Fixed versions
- Not specified
- CVEs
- CVE-2021-43008
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 31 Oct 2026, 00:55 UTC · Revision 1
Source evidence
Improper Access Control in Adminer versions 1.12.0 to 4.6.2 (fixed in version 4.6.3) allows an attacker to achieve Arbitrary File Read on the remote server by requesting the Adminer to connect to a remote MySQL database.
osv:UBUNTU-CVE-2021-43008
adminer
Fixed versions: Not specified
adminer
Fixed versions: Not specified
adminer
Fixed versions: Not specified
adminer
Fixed versions: Not specified
adminer
Fixed versions: Not specified
adminer
Fixed versions: Not specified
adminer
Fixed versions: Not specified
adminer
Fixed versions: Not specified
Complete source record
{
"id": "8ab8d7ae84389acaa6d14580dba4816b392c96a8d3798faa65b7bc7e5e2d99ec",
"url": "https://osv.dev/vulnerability/UBUNTU-CVE-2021-43008",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "UBUNTU-CVE-2021-43008",
"summary": "Improper Access Control in Adminer versions 1.12.0 to 4.6.2 (fixed in version 4.6.3) allows an attacker to achieve Arbitrary File Read on the remote server by requesting the Adminer to connect to a remote MySQL database.",
"evidence": "osv:UBUNTU-CVE-2021-43008",
"products": [
{
"name": {
"value": "adminer",
"evidence": "/affected/0/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "4.2.1-1",
"evidence": "/affected/0/versions"
},
{
"value": "4.2.1-1ubuntu1",
"evidence": "/affected/0/versions"
},
{
"value": "4.2.1-1ubuntu1+esm1",
"evidence": "/affected/0/versions"
}
]
},
{
"name": {
"value": "adminer",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "4.3.1-2",
"evidence": "/affected/1/versions"
},
{
"value": "4.5.0-1",
"evidence": "/affected/1/versions"
},
{
"value": "4.6.1-1",
"evidence": "/affected/1/versions"
},
{
"value": "4.6.2-1",
"evidence": "/affected/1/versions"
},
{
"value": "4.6.2-1ubuntu0.1~esm1",
"evidence": "/affected/1/versions"
}
]
},
{
"name": {
"value": "adminer",
"evidence": "/affected/2/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "4.7.2-1",
"evidence": "/affected/2/versions"
},
{
"value": "4.7.4-1",
"evidence": "/affected/2/versions"
},
{
"value": "4.7.5-1",
"evidence": "/affected/2/versions"
},
{
"value": "4.7.6-1",
"evidence": "/affected/2/versions"
},
{
"value": "4.7.6-1ubuntu0.1~esm1",
"evidence": "/affected/2/versions"
}
]
},
{
"name": {
"value": "adminer",
"evidence": "/affected/3/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "4.7.9-2",
"evidence": "/affected/3/versions"
},
{
"value": "4.8.1-1",
"evidence": "/affected/3/versions"
}
]
},
{
"name": {
"value": "adminer",
"evidence": "/affected/4/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "4.8.1-1",
"evidence": "/affected/4/versions"
},
{
"value": "4.8.1-1ubuntu1",
"evidence": "/affected/4/versions"
},
{
"value": "4.8.1-2",
"evidence": "/affected/4/versions"
}
]
},
{
"name": {
"value": "adminer",
"evidence": "/affected/5/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "4.8.1-4",
"evidence": "/affected/5/versions"
},
{
"value": "5.2.1+dfsg-1",
"evidence": "/affected/5/versions"
}
]
},
{
"name": {
"value": "adminer",
"evidence": "/affected/6/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "5.4.1+dfsg-1",
"evidence": "/affected/6/versions"
},
{
"value": "5.4.2+dfsg-1",
"evidence": "/affected/6/versions"
},
{
"value": "5.4.4+dfsg-1",
"evidence": "/affected/6/versions"
},
{
"value": "6.0.0-1",
"evidence": "/affected/6/versions"
}
]
},
{
"name": {
"value": "adminer",
"evidence": "/affected/7/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "5.2.1+dfsg-1",
"evidence": "/affected/7/versions"
},
{
"value": "5.3.0+dfsg-1",
"evidence": "/affected/7/versions"
},
{
"value": "5.4.0+dfsg-1",
"evidence": "/affected/7/versions"
},
{
"value": "5.4.1+dfsg-1",
"evidence": "/affected/7/versions"
}
]
}
],
"severity": "high",
"structured": {
"id": "UBUNTU-CVE-2021-43008",
"aliases": [
"UBUNTU-CVE-2021-43008"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
},
{
"type": "Ubuntu",
"score": "medium"
}
],
"affected": [
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "adminer",
"purl": "pkg:deb/ubuntu/adminer?arch=source&distro=esm-apps%2Fxenial",
"ecosystem": "Ubuntu:Pro:16.04:LTS"
},
"versions": [
"4.2.1-1",
"4.2.1-1ubuntu1",
"4.2.1-1ubuntu1+esm1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2021/UBUNTU-CVE-2021-43008.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "adminer",
"binary_version": "4.2.1-1ubuntu1+esm1"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "adminer",
"purl": "pkg:deb/ubuntu/adminer?arch=source&distro=esm-apps%2Fbionic",
"ecosystem": "Ubuntu:Pro:18.04:LTS"
},
"versions": [
"4.3.1-2",
"4.5.0-1",
"4.6.1-1",
"4.6.2-1",
"4.6.2-1ubuntu0.1~esm1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2021/UBUNTU-CVE-2021-43008.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "adminer",
"binary_version": "4.6.2-1ubuntu0.1~esm1"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "adminer",
"purl": "pkg:deb/ubuntu/adminer?arch=source&distro=esm-apps%2Ffocal",
"ecosystem": "Ubuntu:Pro:20.04:LTS"
},
"versions": [
"4.7.2-1",
"4.7.4-1",
"4.7.5-1",
"4.7.6-1",
"4.7.6-1ubuntu0.1~esm1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2021/UBUNTU-CVE-2021-43008.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "adminer",
"binary_version": "4.7.6-1ubuntu0.1~esm1"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "adminer",
"purl": "pkg:deb/ubuntu/adminer?arch=source&distro=jammy",
"ecosystem": "Ubuntu:22.04:LTS"
},
"versions": [
"4.7.9-2",
"4.8.1-1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2021/UBUNTU-CVE-2021-43008.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "adminer",
"binary_version": "4.8.1-1"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "adminer",
"purl": "pkg:deb/ubuntu/adminer?arch=source&distro=noble",
"ecosystem": "Ubuntu:24.04:LTS"
},
"versions": [
"4.8.1-1",
"4.8.1-1ubuntu1",
"4.8.1-2"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2021/UBUNTU-CVE-2021-43008.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "adminer",
"binary_version": "4.8.1-2"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "adminer",
"purl": "pkg:deb/ubuntu/adminer?arch=source&distro=questing",
"ecosystem": "Ubuntu:25.10"
},
"versions": [
"4.8.1-4",
"5.2.1+dfsg-1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2021/UBUNTU-CVE-2021-43008.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "adminer",
"binary_version": "5.2.1+dfsg-1"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "adminer",
"purl": "pkg:deb/ubuntu/adminer?arch=source&distro=stonking",
"ecosystem": "Ubuntu:26.10"
},
"versions": [
"5.4.1+dfsg-1",
"5.4.2+dfsg-1",
"5.4.4+dfsg-1",
"6.0.0-1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2021/UBUNTU-CVE-2021-43008.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "adminer",
"binary_version": "6.0.0-1"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "adminer",
"purl": "pkg:deb/ubuntu/adminer?arch=source&distro=resolute",
"ecosystem": "Ubuntu:26.04:LTS"
},
"versions": [
"5.2.1+dfsg-1",
"5.3.0+dfsg-1",
"5.4.0+dfsg-1",
"5.4.1+dfsg-1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2021/UBUNTU-CVE-2021-43008.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "adminer",
"binary_version": "5.4.1+dfsg-1"
}
]
}
}
],
"modified": "2026-10-17T12:56:15.735161401Z",
"provider": "osv",
"upstream": [
"CVE-2021-43008"
],
"references": [
"https://ubuntu.com/security/CVE-2021-43008",
"https://sansec.io/research/adminer-4.6.2-file-disclosure-vulnerability",
"https://github.com/vrana/adminer/releases/tag/v4.6.3",
"https://www.adminer.org/",
"https://podalirius.net/en/cves/2021-43008/",
"https://www.cve.org/CVERecord?id=CVE-2021-43008"
]
},
"related_cves": [
{
"value": "CVE-2021-43008",
"evidence": "/upstream"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 355066,
"published_at": "2022-04-05T02:15:00+00:00"
}