MediumFix available
adminer — security advisory
Adminer and AdminerEvo are vulnerable to SSRF via database connection fields. This could allow an unauthenticated remote attacker to enumerate or access systems the attacker would not otherwise have access to. Adminer is no longer supported, but this issue was fixed in AdminerEvo version 4.8.4.
- Products
- adminer
- Affected versions
- 4.8.1-1, 4.8.1-2, 4.8.1-4, 5.1.0-1, 5.2.1+dfsg-1, 5.3.0+dfsg-1, 5.4.0+dfsg-1, 5.4.1+dfsg-1, 5.4.2+dfsg-1, 5.4.3+dfsg-1, 5.4.4+dfsg-1, 6.0.0-1, 6.0.1-1, 6.0.2-1, 6.1.0-1, 6.1.1-1, 6.1.2-1
- Fixed versions
- 4.8.1-4
- CVEs
- CVE-2023-45195
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 1 Nov 2026, 16:10 UTC · Revision 1
Source evidence
Adminer and AdminerEvo are vulnerable to SSRF via database connection fields. This could allow an unauthenticated remote attacker to enumerate or access systems the attacker would not otherwise have access to. Adminer is no longer supported, but this issue was fixed in AdminerEvo version 4.8.4.
osv:DEBIAN-CVE-2023-45195
adminer
Fixed versions: Not specified
adminer
Fixed versions: 4.8.1-4
adminer
Fixed versions: 4.8.1-4
Complete source record
{
"id": "f54cc6abe2537088658e1d23bedb5717af070452de3811b6d210789af8bfa995",
"url": "https://osv.dev/vulnerability/DEBIAN-CVE-2023-45195",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "DEBIAN-CVE-2023-45195",
"summary": "Adminer and AdminerEvo are vulnerable to SSRF via database connection fields. This could allow an unauthenticated remote attacker to enumerate or access systems the attacker would not otherwise have access to. Adminer is no longer supported, but this issue was fixed in AdminerEvo version 4.8.4.",
"evidence": "osv:DEBIAN-CVE-2023-45195",
"products": [
{
"name": {
"value": "adminer",
"evidence": "/affected/0/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "4.8.1-1",
"evidence": "/affected/0/versions"
},
{
"value": "4.8.1-2",
"evidence": "/affected/0/versions"
},
{
"value": "4.8.1-4",
"evidence": "/affected/0/versions"
},
{
"value": "5.1.0-1",
"evidence": "/affected/0/versions"
},
{
"value": "5.2.1+dfsg-1",
"evidence": "/affected/0/versions"
},
{
"value": "5.3.0+dfsg-1",
"evidence": "/affected/0/versions"
},
{
"value": "5.4.0+dfsg-1",
"evidence": "/affected/0/versions"
},
{
"value": "5.4.1+dfsg-1",
"evidence": "/affected/0/versions"
},
{
"value": "5.4.2+dfsg-1",
"evidence": "/affected/0/versions"
},
{
"value": "5.4.3+dfsg-1",
"evidence": "/affected/0/versions"
},
{
"value": "5.4.4+dfsg-1",
"evidence": "/affected/0/versions"
},
{
"value": "6.0.0-1",
"evidence": "/affected/0/versions"
},
{
"value": "6.0.1-1",
"evidence": "/affected/0/versions"
},
{
"value": "6.0.2-1",
"evidence": "/affected/0/versions"
},
{
"value": "6.1.0-1",
"evidence": "/affected/0/versions"
},
{
"value": "6.1.1-1",
"evidence": "/affected/0/versions"
},
{
"value": "6.1.2-1",
"evidence": "/affected/0/versions"
}
]
},
{
"name": {
"value": "adminer",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "4.8.1-4",
"evidence": "/affected/1/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "adminer",
"evidence": "/affected/2/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "4.8.1-4",
"evidence": "/affected/2/ranges"
}
],
"affected_versions": []
}
],
"severity": "medium",
"structured": {
"id": "DEBIAN-CVE-2023-45195",
"aliases": [
"DEBIAN-CVE-2023-45195"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"
}
],
"affected": [
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "adminer",
"purl": "pkg:deb/debian/adminer?arch=source&distro=bookworm",
"ecosystem": "Debian:12"
},
"versions": [
"4.8.1-1",
"4.8.1-2",
"4.8.1-4",
"5.1.0-1",
"5.2.1+dfsg-1",
"5.3.0+dfsg-1",
"5.4.0+dfsg-1",
"5.4.1+dfsg-1",
"5.4.2+dfsg-1",
"5.4.3+dfsg-1",
"5.4.4+dfsg-1",
"6.0.0-1",
"6.0.1-1",
"6.0.2-1",
"6.1.0-1",
"6.1.1-1",
"6.1.2-1"
],
"database_specific": {
"source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2023-45195.json"
},
"ecosystem_specific": {
"urgency": "not yet assigned"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "4.8.1-4"
}
]
}
],
"package": {
"name": "adminer",
"purl": "pkg:deb/debian/adminer?arch=source&distro=trixie",
"ecosystem": "Debian:13"
},
"database_specific": {
"source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2023-45195.json"
},
"ecosystem_specific": {
"urgency": "not yet assigned"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "4.8.1-4"
}
]
}
],
"package": {
"name": "adminer",
"purl": "pkg:deb/debian/adminer?arch=source&distro=forky",
"ecosystem": "Debian:14"
},
"database_specific": {
"source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2023-45195.json"
},
"ecosystem_specific": {
"urgency": "not yet assigned"
}
}
],
"modified": "2026-10-26T18:02:49.424995042Z",
"provider": "osv",
"upstream": [
"CVE-2023-45195"
],
"references": [
"https://security-tracker.debian.org/tracker/CVE-2023-45195"
]
},
"related_cves": [
{
"value": "CVE-2023-45195",
"evidence": "/upstream"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 456909,
"published_at": "2024-06-24T22:15:10.06+00:00"
}