CVE-2022-0813
Fixed in a distro release EPSS 1%CVSS 5.3
PhpMyAdmin 5.1.1 and before allows an attacker to retrieve potentially sensitive information by creating invalid requests. This affects the lang parameter, the pma_parameter, and the cookie section.
Products: phpMyAdmin
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| Packagist | phpmyadmin/phpmyadmin | 5.1.3 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | phpmyadmin | 4:5.1.3+dfsg1-1 |
| Debian 13 | phpmyadmin | 4:5.1.3+dfsg1-1 |
| Debian 14 | phpmyadmin | 4:5.1.3+dfsg1-1 |
| SUSE Package Hub 15 SP4 | phpMyAdmin | 5.2.1-bp154.2.3.1 |
| Ubuntu 22.04 LTS | phpmyadmin | no fix |
| Ubuntu 24.04 LTS | phpmyadmin | no fix |
| Ubuntu 25.10 | phpmyadmin | no fix |
| Ubuntu 26.04 LTS | phpmyadmin | no fix |
| Ubuntu 26.10 | phpmyadmin | no fix |
| Ubuntu Pro 14.04 LTS | phpmyadmin | no fix |
| Ubuntu Pro 16.04 LTS | phpmyadmin | no fix |
| Ubuntu Pro 18.04 LTS | phpmyadmin | no fix |
| Ubuntu Pro 20.04 LTS | phpmyadmin | no fix |
| openSUSE Leap 15.4 | phpMyAdmin | 5.2.1-bp154.2.3.1 |
| openSUSE Tumbleweed | phpMyAdmin | 5.2.0-2.1 |