Information Exposure Affecting phpmyadmin/phpmyadmin package, versions <5.1.3
Threat Intelligence
EPSS
0.18% (57th
percentile)
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications- Snyk ID SNYK-PHP-PHPMYADMINPHPMYADMIN-2421214
- published 11 Mar 2022
- disclosed 11 Mar 2022
- credit Rafael Pedrero
Introduced: 11 Mar 2022
CVE-2022-0813 Open this link in a new tabHow to fix?
Upgrade phpmyadmin/phpmyadmin to version 5.1.3 or higher.
Overview
phpmyadmin/phpmyadmin is a web interface for MySQL and MariaDB.
Affected versions of this package are vulnerable to Information Exposure which allows an attacker to retrieve potentially sensitive information by creating invalid requests which will cause an error that would reveal the path on disk. This affects the lang parameter, the pma parameter, and the cookie section.
References
CVSS Scores
version 3.1