Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-5p1u-z3kt-5beu
Vulnerability ID VCID-5p1u-z3kt-5beu
Aliases CVE-2021-43008
GHSA-rxfq-3vpc-vv72
Summary Files or Directories Accessible to External Parties in Adminer
Status Published
Exploitability 2.0
Weighted Severity 8.0
Risk 10.0
Affected and Fixed Packages Package Details
Weaknesses (1)
CWE-552 Files or Directories Accessible to External Parties
System Score Found at
epss 0.84736 https://api.first.org/data/v1/epss?cve=CVE-2021-43008
epss 0.84736 https://api.first.org/data/v1/epss?cve=CVE-2021-43008
epss 0.84736 https://api.first.org/data/v1/epss?cve=CVE-2021-43008
cvssv3.1_qr HIGH https://github.com/advisories/GHSA-rxfq-3vpc-vv72
cvssv3.1 7.5 https://github.com/vrana/adminer
generic_textual HIGH https://github.com/vrana/adminer
cvssv3.1 7.5 https://github.com/vrana/adminer/releases/tag/v4.6.3
generic_textual HIGH https://github.com/vrana/adminer/releases/tag/v4.6.3
cvssv3.1 7.5 https://lists.debian.org/debian-lts-announce/2022/05/msg00012.html
generic_textual HIGH https://lists.debian.org/debian-lts-announce/2022/05/msg00012.html
cvssv3.1 7.5 https://nvd.nist.gov/vuln/detail/CVE-2021-43008
generic_textual HIGH https://nvd.nist.gov/vuln/detail/CVE-2021-43008
cvssv3.1 7.5 https://podalirius.net/en/cves/2021-43008
generic_textual HIGH https://podalirius.net/en/cves/2021-43008
cvssv3.1 7.5 https://sansec.io/research/adminer-4.6.2-file-disclosure-vulnerability
generic_textual HIGH https://sansec.io/research/adminer-4.6.2-file-disclosure-vulnerability
cvssv3.1 7.5 https://www.adminer.org
generic_textual HIGH https://www.adminer.org
Reference id Reference type URL
https://api.first.org/data/v1/epss?cve=CVE-2021-43008
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-43008
https://github.com/vrana/adminer
https://github.com/vrana/adminer/releases/tag/v4.6.3
https://lists.debian.org/debian-lts-announce/2022/05/msg00012.html
https://podalirius.net/en/cves/2021-43008
https://podalirius.net/en/cves/2021-43008/
https://sansec.io/research/adminer-4.6.2-file-disclosure-vulnerability
https://www.adminer.org/
CVE-2021-43008 https://nvd.nist.gov/vuln/detail/CVE-2021-43008
GHSA-rxfq-3vpc-vv72 https://github.com/advisories/GHSA-rxfq-3vpc-vv72
No exploits are available.
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Found at https://github.com/vrana/adminer
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Found at https://github.com/vrana/adminer/releases/tag/v4.6.3
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Found at https://lists.debian.org/debian-lts-announce/2022/05/msg00012.html
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Found at https://nvd.nist.gov/vuln/detail/CVE-2021-43008
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Found at https://podalirius.net/en/cves/2021-43008
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Found at https://sansec.io/research/adminer-4.6.2-file-disclosure-vulnerability
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Found at https://www.adminer.org
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Exploit Prediction Scoring System (EPSS)
Percentile 0.99358
EPSS Score 0.84736
Published At June 11, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-06-11T20:28:41.263794+00:00 GHSA Importer Import https://github.com/advisories/GHSA-rxfq-3vpc-vv72 38.6.0