GHSA-8M97-XC46-RW9W phpMyAdmin Unsafe comparison of XSRF/CSRF token

🗓️ 14 May 2022 02:08:30Reported by GoogleType

osv

osv🔗 osv.dev👁 22 Views

phpMyAdmin CSRF token comparison vulnerabilit

Reporter	Title	Published	Views	Family All 48
FreeBSD	phpmyadmin -- Unsafe comparison of XSRF/CSRF token	28 Jan 201600:00	–	freebsd
Tenable Nessus	phpMyAdmin 4.0.x < 4.0.10.13 / 4.4.x < 4.4.15.3 / 4.5.x < 4.5.4 Multiple Vulnerabilities (PMASA-2016-1 - PMASA-2016-5)	2 Mar 201600:00	–	nessus
Tenable Nessus	Debian DLA-406-1 : phpmyadmin security update	1 Feb 201600:00	–	nessus
Tenable Nessus	Debian DLA-481-2 : phpmyadmin regression update	19 May 201600:00	–	nessus
Tenable Nessus	Debian DSA-3627-1 : phpmyadmin - security update	25 Jul 201600:00	–	nessus
Tenable Nessus	Fedora 22 : phpMyAdmin-4.5.4-1.fc22 (2016-e1fe01e96e)	4 Mar 201600:00	–	nessus
Tenable Nessus	Fedora 23 : phpMyAdmin-4.5.4.1-1.fc23 (2016-e55278763e)	4 Mar 201600:00	–	nessus
Tenable Nessus	FreeBSD : phpmyadmin -- Unsafe comparison of XSRF/CSRF token (71b24d99-c60b-11e5-bf36-6805ca0b3d42)	29 Jan 201600:00	–	nessus
Tenable Nessus	openSUSE Security Update : phpMyAdmin (openSUSE-2016-151)	8 Feb 201600:00	–	nessus
Tenable Nessus	openSUSE Security Update : phpMyAdmin 4.4.15.4 (openSUSE-2016-168)	9 Feb 201600:00	–	nessus

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2016-2041
github	www.github.com/phpmyadmin/phpmyadmin/commit/ec0e88e37ef30a66eada1c072953f4ec385a3e49
github	www.github.com/phpmyadmin/composer
lists	www.lists.fedoraproject.org/pipermail/package-announce/2016-February/176483.html
lists	www.lists.fedoraproject.org/pipermail/package-announce/2016-February/176739.html
lists	www.lists.opensuse.org/opensuse-updates/2016-02/msg00028.html
lists	www.lists.opensuse.org/opensuse-updates/2016-02/msg00049.html
debian	www.debian.org/security/2016/dsa-3627
phpmyadmin	www.phpmyadmin.net/home_page/security/PMASA-2016-5.php

24 Apr 2024 18:28Current

6.7Medium risk

Vulners AI Score6.7

CVSS 37.5

EPSS0.02648

phpmyadmin csrf comparison