CVE-2019-19617
phpMyAdmin before 4.9.2 does not escape certain Git information, relat ...
Einstufung nach Quelle
Trivys eigenes Label ist CRITICAL. Kritisch laut NVD, GHSA. Niedriger laut Ubuntu (mittel).
Beschreibung
phpMyAdmin before 4.9.2 does not escape certain Git information, related to libraries/classes/Display/GitRevision.php and libraries/classes/Footer.php.
Betroffene Pakete und behobene Versionen
| Quelle | Paket | Behoben in |
|---|---|---|
| composer::GitHub Security Advisory Composer | phpmyadmin/phpmyadmin | 4.9.2 |
| alpine 3.11 | phpmyadmin | 4.9.2-r0 |
| alpine 3.12 | phpmyadmin | 4.9.2-r0 |
| alpine 3.13 | phpmyadmin | 4.9.2-r0 |
| alpine 3.14 | phpmyadmin | 4.9.2-r0 |
| alpine 3.15 | phpmyadmin | 4.9.2-r0 |
| alpine 3.16 | phpmyadmin | 4.9.2-r0 |
| alpine 3.17 | phpmyadmin | 4.9.2-r0 |
| alpine 3.18 | phpmyadmin | 4.9.2-r0 |
| alpine 3.19 | phpmyadmin | 4.9.2-r0 |
| alpine 3.20 | phpmyadmin | 4.9.2-r0 |
| alpine 3.21 | phpmyadmin | 4.9.2-r0 |
Alle 27 Einträge aus 27 Quellen zeigen
| Quelle | Paket | Behoben in |
|---|---|---|
| composer::GitHub Security Advisory Composer | phpmyadmin/phpmyadmin | 4.9.2 |
| alpine 3.11 | phpmyadmin | 4.9.2-r0 |
| alpine 3.12 | phpmyadmin | 4.9.2-r0 |
| alpine 3.13 | phpmyadmin | 4.9.2-r0 |
| alpine 3.14 | phpmyadmin | 4.9.2-r0 |
| alpine 3.15 | phpmyadmin | 4.9.2-r0 |
| alpine 3.16 | phpmyadmin | 4.9.2-r0 |
| alpine 3.17 | phpmyadmin | 4.9.2-r0 |
| alpine 3.18 | phpmyadmin | 4.9.2-r0 |
| alpine 3.19 | phpmyadmin | 4.9.2-r0 |
| alpine 3.20 | phpmyadmin | 4.9.2-r0 |
| alpine 3.21 | phpmyadmin | 4.9.2-r0 |
| alpine 3.22 | phpmyadmin | 4.9.2-r0 |
| alpine 3.23 | phpmyadmin | 4.9.2-r0 |
| alpine 3.24 | phpmyadmin | 4.9.2-r0 |
| alpine edge | phpmyadmin | 4.9.2-r0 |
| debian 11 | phpmyadmin | 4:4.9.2+dfsg1-1 |
| debian 12 | phpmyadmin | 4:4.9.2+dfsg1-1 |
| debian 13 | phpmyadmin | 4:4.9.2+dfsg1-1 |
| debian 14 | phpmyadmin | 4:4.9.2+dfsg1-1 |
| debian 8 | phpmyadmin | 4:4.2.12-2+deb8u7 |
| debian 9 | phpmyadmin | 4:4.6.6-4+deb9u2 |
| echo | phpmyadmin | 4:4.9.2+dfsg1-1 |
| ubuntu 14.04-ESM | phpmyadmin | 4:4.0.10-1ubuntu0.1+esm2 |
| ubuntu 16.04-ESM | phpmyadmin | 4:4.5.4.1-2ubuntu2.1+esm4 |
| ubuntu 18.04 | phpmyadmin | 4:4.6.6-5ubuntu0.5 |
| ubuntu 18.04-ESM | phpmyadmin | 4:4.6.6-5ubuntu0.5 |
Referenzen
- https://github.com/phpmyadmin/composer
- https://github.com/phpmyadmin/phpmyadmin/commit/1119de642b136d20e810bb20f545069a01dd7cc9
- https://github.com/phpmyadmin/phpmyadmin/compare/RELEASE_4_9_1...RELEASE_4_9_2
- https://lists.debian.org/debian-lts-announce/2019/12/msg00006.html
- https://lists.debian.org/debian-lts-announce/2020/10/msg00024.html
- https://nvd.nist.gov/vuln/detail/CVE-2019-19617
- https://ubuntu.com/security/notices/USN-4639-1
- https://ubuntu.com/security/notices/USN-4843-1