CVE-2020-35572
1 advisory.
Packagist/vrana/adminer CVE-2020-35572: medium 6.1, EPSS 2.00%
vrana/adminer via XSS in the history parameter in SQL command
Action: Upgrade vrana/adminer to 4.7.9 or later.
composer require vrana/adminer:4.7.9Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.7.9 | - |
Fixed versions
| 4.7.9 |
Sources
- osv: GHSA-9pgx-gcph-mpqr
- https://github.com/vrana/adminer/security/advisories/GHSA-9pgx-gcph-mpqr
- https://nvd.nist.gov/vuln/detail/CVE-2020-35572
- https://github.com/vrana/adminer/commit/5c395afc098e501be3417017c6421968aac477bd
- https://github.com/vrana/adminer
- https://sourceforge.net/p/adminer/bugs-and-features/775
- https://sourceforge.net/p/adminer/news/2021/02/adminer-479-released
CVE-2020-35572 · published · modified · JSON