CVE-2023-25727

In phpMyAdmin before 4.9.11 and 5.x before 5.2.1, an authenticated user can trigger XSS by uploading a crafted .sql file through the drag-and-drop int...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

In phpMyAdmin before 4.9.11 and 5.x before 5.2.1, an authenticated user can trigger XSS by uploading a crafted .sql file through the drag-and-drop interface.

Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV

Paquets affectés

Bitnami phpmyadmin

[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"4.9.11"},{"introduced":"5.0.0"},{"fixed":"5.2.1"}]}]

État des correctifs par distribution

Paquets corrigés publiés par chaque distribution pour cette CVE

Debian DEBIAN-CVE-2023-25727 phpmyadmin Corrigé dans: 4:5.0.4+dfsg2-2+deb11u2
Ubuntu UBUNTU-CVE-2023-25727 phpmyadmin

Références

advisory phpmyadmin.net
web nvd.nist.gov
web lists.debian.org