CVE-2020-11441
phpMyAdmin 5.0.2 allows CRLF injection, as demonstrated by %0D%0Astring%0D%0A inputs to login form fields causing CRLF sequences to be reflected on an...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
phpMyAdmin 5.0.2 allows CRLF injection, as demonstrated by %0D%0Astring%0D%0A inputs to login form fields causing CRLF sequences to be reflected on an error page. NOTE: the vendor states "I don't see anything specifically exploitable.
Paquets affectés
Bitnami
phpmyadmin
[{"type":"SEMVER","events":[{"introduced":"5.0.2"},{"fixed":"5.0.3"}]}]
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Debian DEBIAN-CVE-2020-11441 phpmyadmin
Références
- advisory github.com
- web nvd.nist.gov