by Kastro
Paper/Archive/CVE-2023-45197

CVE-2023-45197

Adminer Adminer — Adminer and AdminerEvo vulnerable to directory traversal and file upload

EPSS 0.7%CVSS 9.8
critical.is priorityof 100
40
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 51.7.517 × 2010.3No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

The file upload plugin in Adminer and AdminerEvo allows an attacker to upload a file with a table name of “..” to the root of the Adminer directory. The attacker can effectively guess the name of the uploaded file and execute it. Adminer is no longer supported, but this issue was fixed in AdminerEvo version 4.8.3.

Affected

ProductAffectedFixed inSource
Adminer≤ *–CNA
Adminercpe:2.3:a:adminer:adminer:0:*:*:*:*:*:*:* – cpe:2.3:a:adminer:adminer:*:*:*:*:*:*:*:*–CNA
AdminerEvo4.8.2 – < 4.8.34.8.3CNA
AdminerEvocpe:2.3:a:adminerevo:adminerevo:0:*:*:*:*:*:*:* – < cpe:2.3:a:adminerevo:adminerevo:4.8.3:*:*:*:*:*:*:*cpe:2.3:a:adminerevo:adminerevo:4.8.3:*:*:*:*:*:*:*CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
cisa-cg (CNA)9.2CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/AU:Y
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

patchgithub.com/adminerevo/adminerevo/commit/1cc06d6a1005fd833fa009701badd5641627a1d4refgithub.com/adminerevo/adminerevo/releases/tag/v4.8.3