← Back to browse · API

CVE-2021-21311

Severity
HIGH
CVSS
7.2
EPSS
0.90461
Risk score
56.66
CISA KEV
Yes
PoC
No
Published
2021-02-11
Modified
2025-10-21
First seen
2026-08-07
Aliases
EUVD-2021-0576, GHSA-X5R2-HJ5C-8JX6
Products
Adminer:Adminer, vrana:adminer 4.0.0, < 4.7.9
Sources
cisa.gov CVE-2021-21311
euvd EUVD-2021-0576

Description

Adminer is an open-source database management in a single PHP file. In adminer from version 4.0.0 and before 4.7.9 there is a server-side request forgery vulnerability. Users of Adminer versions bundling all drivers (e.g. `adminer.php`) are affected. This is fixed in version 4.7.9.

References