Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-phhm-63xx-v9rr

Опубликовано: 17 мая 2022
Источник: github
Github: Прошло ревью
CVSS3: 6.3

Описание

phpMyAdmin Reflected File Download attack

An issue was discovered in phpMyAdmin. An attacker may be able to trigger a user to download a specially crafted malicious SVG file. All 4.6.x versions (prior to 4.6.4), 4.4.x versions (prior to 4.4.15.8), and 4.0.x versions (prior to 4.0.10.17) are affected.

Пакеты

Наименование

phpmyadmin/phpmyadmin

composer
Затронутые версииВерсия исправления

>= 4.6, < 4.6.4

4.6.4

Наименование

phpmyadmin/phpmyadmin

composer
Затронутые версииВерсия исправления

>= 4.4, < 4.4.15.8

4.4.15.8

Наименование

phpmyadmin/phpmyadmin

composer
Затронутые версииВерсия исправления

>= 4.0, < 4.0.10.17

4.0.10.17

EPSS

Процентиль: 50%
0.00264
Низкий

6.3 Medium

CVSS3

Связанные уязвимости

CVSS3: 6.3
ubuntu
больше 8 лет назад

An issue was discovered in phpMyAdmin. An attacker may be able to trigger a user to download a specially crafted malicious SVG file. All 4.6.x versions (prior to 4.6.4), 4.4.x versions (prior to 4.4.15.8), and 4.0.x versions (prior to 4.0.10.17) are affected.

CVSS3: 6.3
nvd
больше 8 лет назад

An issue was discovered in phpMyAdmin. An attacker may be able to trigger a user to download a specially crafted malicious SVG file. All 4.6.x versions (prior to 4.6.4), 4.4.x versions (prior to 4.4.15.8), and 4.0.x versions (prior to 4.0.10.17) are affected.

CVSS3: 6.3
debian
больше 8 лет назад

An issue was discovered in phpMyAdmin. An attacker may be able to trig ...

suse-cvrf
почти 9 лет назад

Security update for phpMyAdmin

EPSS

Процентиль: 50%
0.00264
Низкий

6.3 Medium

CVSS3