What is GHSA-3fgq-cmr4-97rr?

GHSA-3fgq-cmr4-97rr is a security advisory published by GitHub Security Advisories with Medium severity. phpMyAdmin CSS Injection Vulnerability

Which CVE IDs does GHSA-3fgq-cmr4-97rr cover?

GHSA-3fgq-cmr4-97rr covers the following CVE IDs: CVE-2017-1000015. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-3fgq-cmr4-97rr?

GHSA-3fgq-cmr4-97rr has a CVSS v3 base score of 6.1, published by GitHub Security Advisories.

Which products are affected by GHSA-3fgq-cmr4-97rr?

GHSA-3fgq-cmr4-97rr affects 3 products, including: composer/phpmyadmin/phpmyadmin:\u003e= 4.6.0, \u003c 4.6.6; composer/phpmyadmin/phpmyadmin:\u003e= 4.4.0, \u003c 4.4.15.10; composer/phpmyadmin/phpmyadmin:\u003e= 4.0.0, \u003c 4.0.10.19.

GHSA-3fgq-cmr4-97rrMediumCVSS 6.1

phpMyAdmin CSS Injection Vulnerability

Vendor

GitHub Security Advisories

Published

May 14, 2022

Last Modified

October 31, 2023

🔗 CVE IDs covered (1)

CVE-2017-1000015 →

📋 Description

phpMyAdmin 4.0, 4.4, and 4.6 are vulnerable to a CSS injection attack through crafted cookie parameters

🎯 Affected products3

composer/phpmyadmin/phpmyadmin:>= 4.6.0, < 4.6.6
composer/phpmyadmin/phpmyadmin:>= 4.4.0, < 4.4.15.10
composer/phpmyadmin/phpmyadmin:>= 4.0.0, < 4.0.10.19

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2017-1000015
https://www.phpmyadmin.net/security/PMASA-2017-4
https://web.archive.org/web/20210123220229/http://www.securityfocus.com/bid/95726
https://github.com/advisories/GHSA-3fgq-cmr4-97rr