GHSA-m56g-3g8v-2rxw
Suggest an improvement- Source
- https://github.com/advisories/GHSA-m56g-3g8v-2rxw
- Import Source
- https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2021/02/GHSA-m56g-3g8v-2rxw/GHSA-m56g-3g8v-2rxw.json
- JSON Data
- https://api.osv.dev/v1/vulns/GHSA-m56g-3g8v-2rxw
- Withdrawn
- 2021-02-11T20:36:42Z
- Published
- 2021-02-11T20:46:53Z
- Modified
- 2024-12-02T05:44:57.021282Z
- Summary
- XSS in Adminer
- Details
-
Withdrawn: Duplicate of GHSA-9pgx-gcph-mpqr.
Adminer before 4.7.9 allows XSS via the history parameter to the default URI.
- Database specific
{ "nvd_published_at": null, "cwe_ids": [ "CWE-79" ], "severity": "MODERATE", "github_reviewed": true, "github_reviewed_at": "2021-02-10T18:26:24Z" }- References
-
- https://nvd.nist.gov/vuln/detail/CVE-2020-35572
- https://github.com/vrana/adminer/commit/5c395afc098e501be3417017c6421968aac477bd
- https://github.com/vrana/adminer
- https://sourceforge.net/p/adminer/bugs-and-features/775
- https://sourceforge.net/p/adminer/news
- https://sourceforge.net/p/adminer/news/2021/02/adminer-479-released
Affected packages
Packagist / vrana/adminer
Package
- Name
- vrana/adminer
- Purl
- pkg:composer/vrana/adminer