{"action":"Upgrade vrana/adminer to 4.7.9 or later.","affected":[{"fixed":"4.7.9","introduced":"0"}],"component":"vrana/adminer","cve_ids":["CVE-2020-35572"],"ecosystem":"Packagist","epss":0.02003,"exploited":false,"fixed_versions":["4.7.9"],"ghsa_id":"GHSA-9pgx-gcph-mpqr","id":"tcs_01M5KF070E0QADY8HMXXMWJTBT","modified_at":"2024-02-17T05:35:37.470563Z","published_at":"2021-02-11T20:42:28Z","references":["https://osv.dev/vulnerability/GHSA-9pgx-gcph-mpqr","https://github.com/vrana/adminer/security/advisories/GHSA-9pgx-gcph-mpqr","https://nvd.nist.gov/vuln/detail/CVE-2020-35572","https://github.com/vrana/adminer/commit/5c395afc098e501be3417017c6421968aac477bd","https://github.com/vrana/adminer","https://sourceforge.net/p/adminer/bugs-and-features/775","https://sourceforge.net/p/adminer/news/2021/02/adminer-479-released"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-9pgx-gcph-mpqr","url":"https://osv.dev/vulnerability/GHSA-9pgx-gcph-mpqr"}],"summary":"vrana/adminer via XSS in the history parameter in SQL command"}