{
  "cveId": "CVE-2021-43008",
  "url": "https://patchblox.com/security/cve/CVE-2021-43008",
  "summary": "CVE-2021-43008 is fixed in adminer on 1 platform, first by DEBIAN-CVE-2021-43008, released April 5, 2022. It is not reported as exploited. Patch Radar priority: High.",
  "title": "adminer: Improper Access Control in Adminer versions 1.12.0 to 4.6.2 (fixed in version 4.6.3) allows an attacker to achieve Ar...",
  "description": "Improper Access Control in Adminer versions 1.12.0 to 4.6.2 (fixed in version 4.6.3) allows an attacker to achieve Arbitrary File Read on the remote server by requesting the Adminer to connect to a remote MySQL database.",
  "published": "2022-04-05T02:15:06Z",
  "severity": "high",
  "cvss": 7.5,
  "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
  "epss": 0.13641,
  "epssPercentile": 0.96507,
  "priority": "High",
  "priorityTier": 3,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "adminer",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "4.6.3-1",
      "fix": "DEBIAN-CVE-2021-43008",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2021-43008",
      "released": "2022-04-05T02:15:06Z"
    },
    {
      "platform": "linux",
      "product": "adminer",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "4.6.3-1",
      "fix": "DEBIAN-CVE-2021-43008",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2021-43008",
      "released": "2022-04-05T02:15:06Z"
    },
    {
      "platform": "linux",
      "product": "adminer",
      "release": "Debian 14",
      "fixedVersion": "4.6.3-1",
      "fix": "DEBIAN-CVE-2021-43008",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2021-43008",
      "released": "2022-04-05T02:15:06Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T19:12:23Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}