Threats tagged 'ghsa-9w28-5vwj-mq45'

Adminer versions 6.0.0 and 6.0.1 are vulnerable to a pre-authentication Server-Side Request Forgery (SSRF) when the official ClickHouse driver plugin is loaded. An unauthenticated attacker can cause the server to send arbitrary HTTP POST requests to internal or external URLs, potentially disclosing sensitive internal information via error responses. This vulnerability is fixed in Adminer 6.0.2.