CVE-2022-23808
1 advisory.
Packagist/phpmyadmin/phpmyadmin CVE-2022-23808: medium 6.1, EPSS 7.94%
Cross-site Scripting in phpmyadmin
Action: Upgrade phpmyadmin/phpmyadmin to 5.1.2 or later.
composer require phpmyadmin/phpmyadmin:5.1.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 5.1.0 | 5.1.2 | - |
Fixed versions
| 5.1.2 |
Sources
- osv: GHSA-vcwc-6mr9-8m7c
- https://nvd.nist.gov/vuln/detail/CVE-2022-23808
- https://github.com/phpmyadmin/phpmyadmin/commit/44eb12f15a562718bbe54c9a16af91ceea335d59
- https://github.com/phpmyadmin/phpmyadmin/commit/5118acce1dfcdb09cbc0f73927bf51c46feeaf38
- https://github.com/phpmyadmin/phpmyadmin
- https://infosecwriteups.com/exploit-cve-2022-23808-85041c6e5b97
- https://security.gentoo.org/glsa/202311-17
- https://www.phpmyadmin.net/security/PMASA-2022-2
CVE-2022-23808 · published · modified · JSON