Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale.
Voir CVE-2018-19970 →
DEBIAN-CVE-2018-19970
In phpMyAdmin before 4.8.4, an XSS vulnerability was found in the navigation tree, where an attacker can deliver a payload to a user through a crafted...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
In phpMyAdmin before 4.8.4, an XSS vulnerability was found in the navigation tree, where an attacker can deliver a payload to a user through a crafted database/table name.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Paquets affectés
Debian:12
phpmyadmin
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:4.9.1+dfsg1-2"}]}]
Debian:13
phpmyadmin
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:4.9.1+dfsg1-2"}]}]
Debian:14
phpmyadmin
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:4.9.1+dfsg1-2"}]}]
Références
- advisory security-tracker.debian.org