GHSA-m56g-3g8v-2rxw

Suggest an improvement
Source
https://github.com/advisories/GHSA-m56g-3g8v-2rxw
Import Source
https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2021/02/GHSA-m56g-3g8v-2rxw/GHSA-m56g-3g8v-2rxw.json
JSON Data
https://api.osv.dev/v1/vulns/GHSA-m56g-3g8v-2rxw
Withdrawn
2021-02-11T20:36:42Z
Published
2021-02-11T20:46:53Z
Modified
2024-12-02T05:44:57Z
Summary
XSS in Adminer
Details

Withdrawn: Duplicate of GHSA-9pgx-gcph-mpqr.

Adminer before 4.7.9 allows XSS via the history parameter to the default URI.

Database specific 
{
    "cwe_ids": [
        "CWE-79"
    ],
    "github_reviewed": true,
    "github_reviewed_at": "2021-02-10T18:26:24Z",
    "nvd_published_at": null,
    "severity": "MODERATE"
}
References

Affected packages

Packagist / vrana/adminer

Package

Name
vrana/adminer
Purl
pkg:composer/vrana/adminer

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.7.9

Affected versions

v4.*
v4.2.0
v4.2.1
v4.2.2
v4.2.3
v4.2.4
v4.2.5
v4.3.0
v4.3.1
v4.4.0
v4.5.0
v4.6.0
v4.6.1
v4.6.2
v4.6.3
v4.7.0
v4.7.1
v4.7.2
v4.7.3
v4.7.4
v4.7.5
v4.7.6
v4.7.7
v4.7.8

Database specific

source 
"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2021/02/GHSA-m56g-3g8v-2rxw/GHSA-m56g-3g8v-2rxw.json"