CVE-2022-0813

PhpMyAdmin exposure of sensitive information

Summary

Original description

The description as published by the source.

PhpMyAdmin 5.1.1 and before allows an attacker to retrieve potentially sensitive information by creating invalid requests. This affects the lang parameter, the pma_parameter, and the cookie section.

Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV

Affected packages

Bitnami phpmyadmin

[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"5.1.2"}]}]

Fix status by distribution

Fixed packages published by each distribution for this CVE

Debian DEBIAN-CVE-2022-0813 phpmyadmin
Ubuntu UBUNTU-CVE-2022-0813 phpmyadmin

References

advisory incibe-cert.es
advisory phpmyadmin.net
web security.gentoo.org
web nvd.nist.gov