CVE-2022-23808

An issue was discovered in phpMyAdmin 5.1 before 5.1.2. An attacker can inject malicious code into aspects of the setup script, which can allow XSS or HTML injection.

Database specific

{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/23xxx/CVE-2022-23808.json",
    "cna_assigner": "mitre",
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "introduced": "5.1"
                },
                {
                    "fixed": "5.1.2"
                }
            ],
            "source": "DESCRIPTION"
        }
    ]
}

References

Affected packages

Git / github.com/phpmyadmin/phpmyadmin

Affected ranges

Type

GIT

Repo

https://github.com/phpmyadmin/phpmyadmin

Events

Introduced

333edd4a793e95a04ee97951ee48807350dca728

Fixed

62563091364a6fcebb67bace94febbd4acdca0f7

Database specific

{
    "extracted_events": [
        {
            "introduced": "5.1.0"
        },
        {
            "fixed": "5.1.2"
        }
    ],
    "cpe": "cpe:2.3:a:phpmyadmin:phpmyadmin:*:*:*:*:*:*:*:*",
    "source": "CPE_RANGE"
}

Affected versions

Other

RELEASE_5_1_0

RELEASE_5_1_1

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-23808.json"