{"id":"CVE-2018-7667","aliases":["DEBIAN-CVE-2018-7667","DLA-1311-1","EUVD-2021-0529","GHSA-43f8-p5w3-5m25","UBUNTU-CVE-2018-7667"],"status":"published","title":"vrana/adminer vulnerable to SSRF by connecting to privileged ports","description":"Adminer through 4.3.1 has SSRF via the server parameter.","severity":{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.04977,"percentile":0.92253,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-918"],"published":"2018-03-05T07:00:00Z","modified":"2026-10-24T10:30:49Z","fixes":[{"ecosystem":"Packagist","package":"vrana/adminer","fixed_in":["4.7.8"],"sources":["ghsa","osv"]},{"ecosystem":"Debian:12","package":"adminer","fixed_in":["4.5.0-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"adminer","fixed_in":["4.5.0-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"adminer","fixed_in":["4.5.0-1"],"sources":["osv"]},{"ecosystem":"Debian:7","package":"adminer","fixed_in":["3.3.3-1+deb7u1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"adminer","fixed_in":["3.3.3-1+deb7u1build0.14.04.1"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"Packagist","package":"vrana/adminer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.7.8"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"adminer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.0-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"adminer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.0-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"adminer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.0-1"}]}]},{"source":"osv","ecosystem":"Debian:7","package":"adminer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.3-1+deb7u1"}]}],"versions":["3.3.3-1"]},{"source":"osv","ecosystem":"Packagist","package":"vrana/adminer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.7.8"}]}],"versions":["v4.2.0","v4.2.1","v4.2.2","v4.2.3","v4.2.4","v4.2.5","v4.3.0","v4.3.1","v4.4.0","v4.5.0","v4.6.0","v4.6.1","v4.6.2","v4.6.3","v4.7.0","v4.7.1","v4.7.2","v4.7.3","v4.7.4","v4.7.5","v4.7.6","v4.7.7"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"adminer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.3-1+deb7u1build0.14.04.1"}]}],"versions":["3.3.3-1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"adminer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.2.1-1","4.2.1-1ubuntu1","4.2.1-1ubuntu1+esm1"]}],"products":[{"vendor":"adminer","product":"adminer"}],"references":[{"url":"http://hyp3rlinx.altervista.org/advisories/ADMINER-UNAUTHENTICATED-SERVER-SIDE-REQUEST-FORGERY.txt","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory","evidence","web","report"]},{"url":"https://lists.debian.org/debian-lts-announce/2018/03/msg00014.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Third Party Advisory","advisory"]},{"url":"https://github.com/vrana/adminer/security/advisories/GHSA-43f8-p5w3-5m25","tags":["web"]},{"url":"https://sourceforge.net/p/adminer/bugs-and-features/769/"},{"url":"https://gusralph.info/adminer-ssrf-bypass-cve-2018-7667","tags":["web"]},{"url":"https://github.com/vrana/adminer/commit/35bfaa75","tags":["web"]},{"url":"https://github.com/advisories/GHSA-43f8-p5w3-5m25"},{"url":"https://security-tracker.debian.org/tracker/CVE-2018-7667","tags":["advisory"]},{"url":"https://sourceforge.net/p/adminer/bugs-and-features/769","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2018-7667","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-7667","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2018-7667","description":"Adminer through 4.3.1 has SSRF via the server parameter.","status":"published","published":"2018-03-05T07:00:00Z","modified":"2024-08-05T06:31:05.042Z","updated_at":"2026-11-02T14:35:09.908186Z"}],"euvd":[{"id":"EUVD-2021-0529","description":"Adminer through 4.3.1 has SSRF via the server parameter.","status":"published","published":"2018-03-05T07:00:00Z","modified":"2024-08-05T06:31:05Z","updated_at":"2026-11-03T02:40:05.186892Z"}],"ghsa":[{"id":"GHSA-43f8-p5w3-5m25","title":"vrana/adminer vulnerable to SSRF by connecting to privileged ports","description":"### Impact\nAll users are affected.\n\n### Patches\n* Unsuccessfully patched by 0fae40fb, included in version [4.4.0](https://github.com/vrana/adminer/releases/tag/v4.4.0).\n* Patched by 35bfaa75, included in version [4.7.8](https://github.com/vrana/adminer/releases/tag/v4.7.8).\n\n### Workarounds\nProtect access to Adminer also by other means, e.g. by HTTP password, IP address limiting or by OTP [plugin](https://www.adminer.org/plugins/).\n\n### References\n* http://hyp3rlinx.altervista.org/advisories/ADMINER-UNAUTHENTICATED-SERVER-SIDE-REQUEST-FORGERY.txt\n* https://sourceforge.net/p/adminer/bugs-and-features/769/\n* https://gusralph.info/adminer-ssrf-bypass-cve-2018-7667/ (CVE-2020-28654)\n\n### For more information\nIf you have any questions or comments about this advisory:\n* Comment at 35bfaa75.","status":"published","published":"2021-02-11T21:20:40Z","modified":"2023-09-21T19:57:50Z","cwes":["CWE-918"],"updated_at":"2026-11-02T14:37:06.234371Z"}],"nvd":[{"id":"CVE-2018-7667","description":"Adminer through 4.3.1 has SSRF via the server parameter.","status":"published","published":"2018-03-05T07:29:00.493Z","modified":"2026-06-17T02:03:30.473Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"cwes":["CWE-918"],"updated_at":"2026-11-02T14:04:23.783914Z"}],"osv":[{"id":"CVE-2018-7667","description":"Adminer through 4.3.1 has SSRF via the server parameter.","status":"published","published":"2018-03-05T07:29:00.493Z","modified":"2026-10-24T10:30:49.513272657Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:44:09.74357Z"},{"id":"DEBIAN-CVE-2018-7667","description":"Adminer through 4.3.1 has SSRF via the server parameter.","status":"published","published":"2018-03-05T07:29:00.493Z","modified":"2026-10-23T18:03:58.662554918Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:45:31.170944Z"},{"id":"UBUNTU-CVE-2018-7667","description":"Adminer through 4.3.1 has SSRF via the server parameter.","status":"published","published":"2018-03-05T07:29:00Z","modified":"2025-09-08T16:44:48Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:54:18.772093Z"},{"id":"DLA-1311-1","title":"adminer - security update","status":"published","published":"2018-03-22T00:00:00Z","modified":"2026-03-09T01:00:58.490254Z","updated_at":"2026-11-02T15:46:09.336894Z"},{"id":"GHSA-43f8-p5w3-5m25","title":"vrana/adminer vulnerable to SSRF by connecting to privileged ports","description":"### Impact\nAll users are affected.\n\n### Patches\n* Unsuccessfully patched by 0fae40fb, included in version [4.4.0](https://github.com/vrana/adminer/releases/tag/v4.4.0).\n* Patched by 35bfaa75, included in version [4.7.8](https://github.com/vrana/adminer/releases/tag/v4.7.8).\n\n### Workarounds\nProtect access to Adminer also by other means, e.g. by HTTP password, IP address limiting or by OTP [plugin](https://www.adminer.org/plugins/).\n\n### References\n* http://hyp3rlinx.altervista.org/advisories/ADMINER-UNAUTHENTICATED-SERVER-SIDE-REQUEST-FORGERY.txt\n* https://sourceforge.net/p/adminer/bugs-and-features/769/\n* https://gusralph.info/adminer-ssrf-bypass-cve-2018-7667/ (CVE-2020-28654)\n\n### For more information\nIf you have any questions or comments about this advisory:\n* Comment at 35bfaa75.","status":"published","published":"2021-02-11T21:20:40Z","modified":"2024-12-02T05:29:14.702054Z","cwes":["CWE-918"],"updated_at":"2026-11-02T15:46:36.434231Z"}]}}