phpMyAdmin unsanitized Git information

CRITICAL 9.8CVE-2019-19617 · GHSA-pgph-mc4p-f8c3 · Published 06/12/2019 · updated 17/06/2026

Package	Affected versions	Patched versions
phpmyadmin/phpmyadmin Packagist	`< 4.9.2`	`4.9.2`
phpmyadmin phpmyadmin	`< 4.9.2`	`4.9.2`

Description

phpMyAdmin before 4.9.2 does not escape certain Git information, related to libraries/classes/Display/GitRevision.php and libraries/classes/Footer.php.

NVD description

phpMyAdmin before 4.9.2 does not escape certain Git information, related to libraries/classes/Display/GitRevision.php and libraries/classes/Footer.php.

References

nvd.nist.gov/vuln/detail/CVE-2019-19617 · ADVISORY
phpmyadmin/phpmyadmin commit 1119de6 · WEB
phpmyadmin/composer · PACKAGE
phpmyadmin/phpmyadmin · WEB
lists.debian.org/debian-lts-announce/2019/12/msg00006.html · WEB
lists.debian.org/debian-lts-announce/2020/10/msg00024.html · WEB
phpmyadmin.net/news/2019/11/22/phpmyadmin-492-released · WEB
phpmyadmin.net/news/2019/11/22/phpmyadmin-492-released · Release Notes

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free