{"action":"Upgrade phpmyadmin/phpmyadmin to 4.0.10.20 or later.","affected":[{"fixed":"4.0.10.20","introduced":"4.0"},{"fixed":"4.7.0","introduced":"4.7.0-beta1"},{"introduced":"4.4.0","last_affected":"4.4.15.10"},{"introduced":"4.6.0","last_affected":"4.6.6"}],"component":"phpmyadmin/phpmyadmin","cve_ids":["CVE-2017-18264"],"ecosystem":"Packagist","epss":0.02818,"exploited":false,"fixed_versions":["4.0.10.20","4.7.0"],"ghsa_id":"GHSA-5868-g58j-vrj5","id":"tcs_01M5KEVS2HATY15SQZNNY4R70Y","modified_at":"2024-04-24T18:42:01.594746Z","published_at":"2022-05-13T01:44:38Z","references":["https://osv.dev/vulnerability/GHSA-5868-g58j-vrj5","https://nvd.nist.gov/vuln/detail/CVE-2017-18264","https://github.com/phpmyadmin/composer","https://lists.debian.org/debian-lts-announce/2018/07/msg00006.html","https://www.phpmyadmin.net/security/PMASA-2017-8","http://www.securityfocus.com/bid/97211"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-5868-g58j-vrj5","url":"https://osv.dev/vulnerability/GHSA-5868-g58j-vrj5"}],"summary":"phpMyAdmin Improper Privilege Management"}