Bug 9148

Summary:	[Update Request] phpmyadmin
Product:	[ROSA-based products] ROSA Fresh	Reporter:	Zombie Ryushu <zombie.ryushu>
Component:	Packages from Main	Assignee:	ROSA Linux Bugs <bugs>
Status:	RESOLVED FIXED	QA Contact:	ROSA Linux Bugs <bugs>
Severity:	normal
Priority:	Normal	CC:	andrey.bondrov, denis.silakov, mc2374
Version:	Plasma5
Target Milestone:	---
Hardware:	All
OS:	Linux
URL:	https://advisories.mageia.org/MGASA-2018-0304.html
Whiteboard:
Platform:	---	ROSA Vulnerability identifier:	phpmyadmin
RPM Package:	CVE-2018-12581	ISO-related:
Bad POT generating:		Upstream:

Description Zombie Ryushu 2018-07-03 04:47:06 MSK

A Cross-Site Scripting vulnerability was found in the Designer feature,
where an attacker can deliver a payload to a user through a
specially-crafted database name.

Comment 1 Denis Silakov 2018-09-29 16:17:43 MSK

This is fixed in 4.8.2 which we have in repos.