CVE-2022-0813

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2022-0813
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-0813.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2022-0813
Aliases
Downstream
Related
Published
2022-03-09T14:59:28.954Z
Modified
2026-05-28T04:07:15.193241270Z
Severity
  • 5.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CVSS Calculator
Summary
PhpMyAdmin exposure of sensitive information
Details

PhpMyAdmin 5.1.1 and before allows an attacker to retrieve potentially sensitive information by creating invalid requests. This affects the lang parameter, the pma_parameter, and the cookie section.

Database specific 
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/0xxx/CVE-2022-0813.json",
    "cna_assigner": "INCIBE",
    "cwe_ids": [
        "CWE-200"
    ],
    "unresolved_ranges": [
        {
            "source": "AFFECTED_FIELD",
            "extracted_events": [
                {
                    "last_affected": "5.1.1"
                }
            ]
        }
    ]
}
References

Affected packages

Git / github.com/phpmyadmin/phpmyadmin

Affected ranges

Type
GIT
Repo
https://github.com/phpmyadmin/phpmyadmin
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
ed65cd2d8b26073d30311163f8e25e722a9aef0f
Database specific 
{
    "cpe": "cpe:2.3:a:phpmyadmin:phpmyadmin:*:*:*:*:*:*:*:*",
    "source": "CPE_RANGE",
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "5.1.1"
        }
    ]
}

Affected versions

Other
RELEASE_2_2_0
RELEASE_2_2_1
RELEASE_2_2_2
RELEASE_2_2_3
RELEASE_2_2_4
RELEASE_2_2_5
RELEASE_2_2_6
RELEASE_2_2_7PL1
RELEASE_2_3_0
RELEASE_2_3_1
RELEASE_2_3_2
RELEASE_2_3_3PL1
RELEASE_2_4_0
RELEASE_2_5_0
RELEASE_2_5_1
RELEASE_2_5_2
RELEASE_2_5_4
RELEASE_2_5_5PL1
RELEASE_2_5_6
RELEASE_2_5_7PL1
RELEASE_2_6_1PL3
RELEASE_2_6_2PL1
RELEASE_2_6_3PL1
RELEASE_2_6_4PL4
RELEASE_2_7_0PL2
RELEASE_2_8_0_4
RELEASE_2_8_1
RELEASE_2_8_2_4
RELEASE_2_9_0
RELEASE_3_4_0RC2
RELEASE_3_5_0ALPHA1
RELEASE_4_0_0ALPHA2
RELEASE_4_0_0BETA3
RELEASE_4_0_0RC1
RELEASE_4_1_0ALPHA1
RELEASE_4_1_0BETA1
RELEASE_4_1_0BETA2
RELEASE_4_2_0ALPHA2
RELEASE_4_2_0BETA1
RELEASE_4_8_0ALPHA1
RELEASE_4_8_0RC1
RELEASE_5_0_0ALPHA1
RELEASE_5_1_0
RELEASE_5_1_0RC1
RELEASE_5_1_0RC2
RELEASE_5_1_1

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-0813.json"