{"action":"Upgrade vrana/adminer to 4.6.3 or later.","affected":[{"fixed":"4.6.3","introduced":"1.12.0"}],"component":"vrana/adminer","cve_ids":["CVE-2021-43008"],"ecosystem":"Packagist","epss":0.13641,"exploited":false,"fixed_versions":["4.6.3"],"ghsa_id":"GHSA-rxfq-3vpc-vv72","id":"tcs_01M5KF8NKSQ0397MH942KW9099","modified_at":"2024-02-20T05:34:06.191209Z","published_at":"2022-04-06T00:01:33Z","references":["https://osv.dev/vulnerability/GHSA-rxfq-3vpc-vv72","https://nvd.nist.gov/vuln/detail/CVE-2021-43008","https://github.com/vrana/adminer","https://github.com/vrana/adminer/releases/tag/v4.6.3","https://lists.debian.org/debian-lts-announce/2022/05/msg00012.html","https://podalirius.net/en/cves/2021-43008","https://sansec.io/research/adminer-4.6.2-file-disclosure-vulnerability","https://www.adminer.org"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-rxfq-3vpc-vv72","url":"https://osv.dev/vulnerability/GHSA-rxfq-3vpc-vv72"}],"summary":"Files or Directories Accessible to External Parties in Adminer"}