CVE-2023-45196

Adminer and AdminerEvo allow an unauthenticated remote attacker to cause a denial of service by connecting to an attacker-controlled service that responds with HTTP redirects. The denial of service is subject to PHP configuration limits. Adminer is no longer supported, but this issue was fixed in AdminerEvo version 4.8.4.
CVSS

No CVSS.

Configurations

No configuration.

History

25 Jun 2024, 12:24

Type Values Removed Values Added
Summary
  • (es) Adminer y AdminerEvo permiten que un atacante remoto no autenticado provoque una denegación de servicio al conectarse a un servicio controlado por el atacante que responde con redirecciones HTTP. La denegación de servicio está sujeta a los límites de configuración de PHP. Adminer ya no es compatible, pero este problema se solucionó en AdminerEvo versión 4.8.4.

24 Jun 2024, 21:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-06-24 21:15

Updated : 2024-06-25 12:24


NVD link : CVE-2023-45196

Mitre link : CVE-2023-45196

CVE.ORG link : CVE-2023-45196


JSON object : View

Products Affected

No product.

CWE
CWE-400

Uncontrolled Resource Consumption