Server-side request forgery in Adminer - CVE-2018-7667

Vulnerability identifier: #VU11277

CSH Severity: Medium

CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N]

CVE-ID: CVE-2018-7667

CWE-ID: CWE-918

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform SSRF attacks.

The vulnerability exists due to improper filtration of user-supplied data passed via "server" HTTP GET parameter. A remote unauthenticated attacker can send requests to internal server resources and scan ports on the local server.

Adminer
Adminer

Update to version 4.4.0.

Adminer - update to 9.6.1

• http://hyp3rlinx.altervista.org/advisories/ADMINER-UNAUTHENTICATED-SERVER-SIDE-REQUEST-FORGERY.txt

• SSRF-attack in Adminer
• Multiple vulnerabilities in Adminer extension for TYPO3