CyberRota Analysis
AI-GeneratedAdminer versions prior to 5.4.3 are vulnerable due to the insertion of unsanitized database server version strings into script tags, which can lead to arbitrary code execution when attackers manipulate a rogue MySQL server. This vulnerability allows attackers to bypass Content Security Policy protections, posing a risk to applications relying on Adminer for database management. Organizations using affected versions of Adminer should prioritize patching to mitigate potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Adminer before 5.4.3 inserts unsanitized database server version strings into script tags with valid CSP nonces without proper validation. Attackers controlling a rogue MySQL server can return crafted version strings that break out of the JavaScript context and execute arbitrary code, bypassing Content Security Policy protections.