CVE catalog

CVE-2023-45195

adminer: CVE-2023-45195

[CVE catalog]

Severity
Medium
Published
Source
[NVD] · [CVE record]
EPSS
0.41% · Oct 25, 2026

Adminer and AdminerEvo are vulnerable to SSRF via database connection fields. This could allow an unauthenticated remote attacker to enumerate or access systems the attacker would not otherwise have access to. Adminer is no longer supported, but this issue was fixed in AdminerEvo version 4.8.4.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianadminersid6.1.2-1fixed
Debianadminerforky6.1.0-1fixed
Debianadminertrixie5.2.1+dfsg-1fixed
Debianadminerbookworm4.8.1-1vulnerable

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianadminersourcesid4.8.1-4not yet assignedNot reported[1074430]
Debianadminersourceforky4.8.1-4not yet assignedNot reported[1074430]
Debianadminersourcetrixie4.8.1-4not yet assignedNot reported[1074430]
Debianadminersourcebookworm(unfixed)not yet assignedNot reported[1074430]

[Debian bug #1074430]

Notes

[bookworm] adminer: Minor issue

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [adminer]Affected
    Details (2)

    • 4.8.1-1 · all · bookworm

      Affected

      dsa · adminer · debian · bookworm; dsa · adminer · debian · 12

    • 4.8.1-1 · all · bookworm

      Affected

      dsa · adminer · debian · bookworm; dsa · adminer · debian · 12

[Debian 13 (Trixie)]

  • [adminer]Fixed
    Details (2)

    • 5.2.1+dfsg-1 · all · trixie

      Fixed · Fixed: 4.8.1-4

      dsa · adminer · debian · 13

    • 5.2.1+dfsg-1 · all · trixie

      Fixed · Fixed: 4.8.1-4

      dsa · adminer · debian · 13

Observed:

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database]