What is GHSA-xwf2-53mc-r8hx?

GHSA-xwf2-53mc-r8hx is a security advisory published by GitHub Security Advisories with High severity. phpMyAdmin CSRF Vulnerability

Which CVE IDs does GHSA-xwf2-53mc-r8hx cover?

GHSA-xwf2-53mc-r8hx covers the following CVE IDs: CVE-2018-19969. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-xwf2-53mc-r8hx?

GHSA-xwf2-53mc-r8hx has a CVSS v3 base score of 8.8, published by GitHub Security Advisories.

Which products are affected by GHSA-xwf2-53mc-r8hx?

GHSA-xwf2-53mc-r8hx affects 2 products, including: composer/phpmyadmin/phpmyadmin:\u003e= 4.8, \u003c 4.8.4; composer/phpmyadmin/phpmyadmin:\u003e= 4.7, \u003c= 4.7.6.

GHSA-xwf2-53mc-r8hxHighCVSS 8.8

phpMyAdmin CSRF Vulnerability

Vendor

GitHub Security Advisories

Published

May 14, 2022

Last Modified

July 24, 2023

🔗 CVE IDs covered (1)

CVE-2018-19969 →

📋 Description

phpMyAdmin 4.7.x and 4.8.x versions prior to 4.8.4 are affected by a series of CSRF flaws. By deceiving a user into clicking on a crafted URL, it is possible to perform harmful SQL operations such as renaming databases, creating new tables/routines, deleting designer pages, adding/deleting users, updating user passwords, killing SQL processes, etc.

🎯 Affected products2

composer/phpmyadmin/phpmyadmin:>= 4.8, < 4.8.4
composer/phpmyadmin/phpmyadmin:>= 4.7, <= 4.7.6

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2018-19969
https://security.gentoo.org/glsa/201904-16
https://www.phpmyadmin.net/security/PMASA-2018-7/
https://web.archive.org/web/20210124223800/https://www.securityfocus.com/bid/106175/
https://github.com/advisories/GHSA-xwf2-53mc-r8hx