CVE-2021-43008: Adminer

High severity, CVSS 7.5. EPSS: 13.6% chance of exploitation in the next 30 days.

Improper Access Control in Adminer versions 1.12.0 to 4.6.2 (fixed in version 4.6.3) allows an attacker to achieve Arbitrary File Read on the remote server by requesting the Adminer to connect to a remote MySQL database.

Affected products

• Adminer Adminer: from 1.12.0, up to and including 4.6.2
• Debian Debian Linux: version 9.0 only

Published 2022-04-05. Last modified 2026-06-17.