{"id":"GHSA-97h7-mf38-g9mf","aliases":[],"status":"published","title":"Adminer file disclosure vulnerability","description":"Adminer script versions up to 4.6.2 contains file disclosure vulnerability.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","from":"ghsa"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-200"],"published":"2024-06-07T22:19:44Z","modified":"2024-12-04T05:32:41Z","fixes":[{"ecosystem":"Packagist","package":"vrana/adminer","fixed_in":["4.6.3"],"sources":["ghsa","osv"]}],"affected":[{"source":"ghsa","ecosystem":"Packagist","package":"vrana/adminer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.1"},{"fixed":"4.6.3"}]}]},{"source":"osv","ecosystem":"Packagist","package":"vrana/adminer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.1"},{"fixed":"4.6.3"}]}],"versions":["v4.3.1","v4.4.0","v4.5.0","v4.6.0","v4.6.1","v4.6.2"]}],"references":[{"url":"https://github.com/vrana/adminer/commit/c564a8ef5095d26b1d7f2ebab4dc3c3516bc0c7b","tags":["web"]},{"url":"https://github.com/FriendsOfPHP/security-advisories/blob/master/vrana/adminer/2019-01-20.yaml","tags":["web"]},{"url":"https://sansec.io/research/adminer-4.6.2-file-disclosure-vulnerability","tags":["web"]},{"url":"https://github.com/advisories/GHSA-97h7-mf38-g9mf"},{"url":"https://github.com/vrana/adminer","tags":["package"]}],"sources":{"ghsa":[{"id":"GHSA-97h7-mf38-g9mf","title":"Adminer file disclosure vulnerability","description":"Adminer script versions up to 4.6.2 contains file disclosure vulnerability.","status":"published","published":"2024-06-07T22:19:44Z","modified":"2024-06-07T22:19:45Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:37:54.624184Z"}],"osv":[{"id":"GHSA-97h7-mf38-g9mf","title":"Adminer file disclosure vulnerability","description":"Adminer script versions up to 4.6.2 contains file disclosure vulnerability.","status":"published","published":"2024-06-07T22:19:44Z","modified":"2024-12-04T05:32:41.435262Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T15:46:43.524801Z"}]}}