CVE-2021-21311

    Dashboard / Vulnerabilities / CVE-2021-21311

    CVE-2021-21311

    Published: 11 Feb 2021Last Modified: 7 Aug 2026

    Summary:

    Details: Adminer is an open-source database management in a single PHP file. In adminer from version 4.0.0 and before 4.7.9 there is a server-side request forgery vulnerability. Users of Adminer versions bundling all drivers (e.g. `adminer.php`) are affected. This is fixed in version 4.7.9.

    References: https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-21311, https://lists.debian.org/debian-lts-announce/2021/03/msg00002.html, https://packagist.org/packages/vrana/adminer, https://github.com/vrana/adminer/commit/ccd2374b0b12bd547417bf0dacdf153826c83351, https://github.com/vrana/adminer/security/advisories/GHSA-x5r2-hj5c-8jx6, https://github.com/vrana/adminer/files/5957311/Adminer.SSRF.pdf

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 184273750aa4b255e54b30296f580ebca89a2d39
    Fixed -93c7fb248ca008e3247eb3a43812e1096e7b262c

    Affected versions

    v4.7.8
    v4.7.7
    v4.7.5
    v4.7.4
    v4.7.3
    v4.7.2
    v4.7.1
    v4.7.0

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2021-21311 | CVE-DB