{"action":"Upgrade vrana/adminer to 4.7.8 or later.","affected":[{"fixed":"4.7.8","introduced":"0"}],"component":"vrana/adminer","cve_ids":["CVE-2018-7667"],"ecosystem":"Packagist","epss":0.04977,"exploited":false,"fixed_versions":["4.7.8"],"ghsa_id":"GHSA-43f8-p5w3-5m25","id":"tcs_01M5KETGCK07FGXQFYK54TTRAY","modified_at":"2024-12-02T05:29:14.702054Z","published_at":"2021-02-11T21:20:40Z","references":["https://osv.dev/vulnerability/GHSA-43f8-p5w3-5m25","https://github.com/vrana/adminer/security/advisories/GHSA-43f8-p5w3-5m25","https://github.com/vrana/adminer/commit/35bfaa75","https://gusralph.info/adminer-ssrf-bypass-cve-2018-7667","https://sourceforge.net/p/adminer/bugs-and-features/769","http://hyp3rlinx.altervista.org/advisories/ADMINER-UNAUTHENTICATED-SERVER-SIDE-REQUEST-FORGERY.txt"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-43f8-p5w3-5m25","url":"https://osv.dev/vulnerability/GHSA-43f8-p5w3-5m25"}],"summary":"vrana/adminer vulnerable to SSRF by connecting to privileged ports"}