tocsin

Debian/adminer: unknown

Adminer before 5.4.3 contains a cookie injection vulnerability that allows attackers to manipulate cookie attributes by injecting arbitrary values through the unsanitized X-Forwarded-Prefix HTTP heade

Action: Upgrade adminer to 5.4.3+dfsg-1 or later.

Affected

introducedfixedlast affected
05.4.3+dfsg-1-

Fixed versions

5.4.3+dfsg-1

Sources

published · modified · JSON