CVE-2021-4259

The CVE concerns phpRedisAdmin up to 1.16.1, where the authHttpDigest function in includes/login.inc.php mishandles the response parameter, enabling a wrong operator in string comparison. The issue is addressed by upgrading to 1.16.2 or later; patch identified as 31aa7661e6db6f4dffbf9a635817832a0...

CVE-2021-4268

CVE-2021-4268 affects phpRedisAdmin up to version 1.17.3. The issue is a cross-site request forgery originating from an unknown section, with remote exploit potential. A fix is available in version 1.18.0, and the patch is identified by the hash b9039adbb264c81333328faa9575ecf8e0d2be94. Affected ...