HIGH

CVE-2021-43008

CVSS v3

7.5

HIGH

EPSS Score

83.6%

exploit probability

CISA KEV

No

known exploited

Exploitation

SSVC status

Description

Improper Access Control in Adminer versions 1.12.0 to 4.6.2 (fixed in version 4.6.3) allows an attacker to achieve Arbitrary File Read on the remote server by requesting the Adminer to connect to a remote MySQL database.

Technical details

Published
4/5/2022

Frequently asked questions

What is CVE-2021-43008?

Improper Access Control in Adminer versions 1.12.0 to 4.6.2 (fixed in version 4.6.3) allows an attacker to achieve Arbitrary File Read on the remote server by requesting the Adminer to connect to a remote MySQL database.

Is CVE-2021-43008 actively exploited?

Active exploitation of CVE-2021-43008 has not been confirmed. The EPSS score is 83.6%, indicating the estimated probability of exploitation in the next 30 days.

What is the CVSS score for CVE-2021-43008?

CVE-2021-43008 has a CVSS v3 base score of 7.5 (HIGH severity).

Is CVE-2021-43008 affecting your environment?

Use isMalicious to check if any of your IPs or domains are associated with this vulnerability's IOCs.