CRITICAL
phpMyAdmin before 4.9.2 does not escape certain Git information, related to libraries/classes/Display/GitRevision.php and libraries/classes/Footer.php
Published Dec 6, 2019
9.8
CRITICALCVSS 3.1
EPSS 2.59%
Description
phpMyAdmin before 4.9.2 does not escape certain Git information, related to libraries/classes/Display/GitRevision.php and libraries/classes/Footer.php.
Affected products
No data.
Configuration 1
- < 4.9.2
Configuration 2
OR
- 8.0
- 9.0
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Weaknesses (0)
No CWE recorded.
References (7)
- https://github.com/advisories/GHSA-pgph-mc4p-f8c3 Advisory
- https://github.com/phpmyadmin/phpmyadmin/commit/1119de642b136d20e810bb20f545069a01dd7cc9 x_refsource_MISCPatchThird Party Advisory
- https://github.com/phpmyadmin/phpmyadmin/compare/RELEASE_4_9_1...RELEASE_4_9_2 x_refsource_MISCRelease NotesThird Party Advisory
- https://lists.debian.org/debian-lts-announce/2019/12/msg00006.html mailing-listx_refsource_MLISTMailing ListThird Party Advisory
- https://lists.debian.org/debian-lts-announce/2020/10/msg00024.html mailing-listx_refsource_MLISTMailing ListThird Party Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2019-19617
- https://www.phpmyadmin.net/news/2019/11/22/phpmyadmin-492-released x_refsource_MISCRelease NotesVendor Advisory
| Link | Providers | Tags |
|---|---|---|
| https://github.com/advisories/GHSA-pgph-mc4p-f8c3 | Advisory | |
| https://github.com/phpmyadmin/phpmyadmin/commit/1119de642b136d20e810bb20f545069a01dd7cc9 | x_refsource_MISCPatchThird Party Advisory | |
| https://github.com/phpmyadmin/phpmyadmin/compare/RELEASE_4_9_1...RELEASE_4_9_2 | x_refsource_MISCRelease NotesThird Party Advisory | |
| https://lists.debian.org/debian-lts-announce/2019/12/msg00006.html | mailing-listx_refsource_MLISTMailing ListThird Party Advisory | |
| https://lists.debian.org/debian-lts-announce/2020/10/msg00024.html | mailing-listx_refsource_MLISTMailing ListThird Party Advisory | |
| https://nvd.nist.gov/vuln/detail/CVE-2019-19617 | ||
| https://www.phpmyadmin.net/news/2019/11/22/phpmyadmin-492-released | x_refsource_MISCRelease NotesVendor Advisory |
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Dec 6, 2019
Updated Aug 5, 2024
Reserved Dec 6, 2019
Link CVE-2019-19617
CISA Vulnrichment
GHSA-PGPH-MC4P-F8C3 Updated n/a