CVE-2026-56704 in adminer
要約
〜によって MITRE • 2026年08月25日
Adminer before 5.4.3 inserts unsanitized database server version strings into script tags with valid CSP nonces without proper validation. Attackers controlling a rogue MySQL server can return crafted version strings that break out of the JavaScript context and execute arbitrary code, bypassing Content Security Policy protections.
Once again VulDB remains the best source for vulnerability data.