PT-2025-5383 · Unknown+2 · Phpmyadmin+2

Bluebird · Publicado 2025-01-23 · Atualizado 2025-11-06 · CVE-2025-24530

Positive Technologies (AI Summary)

CVSS v3.1

6.4

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions phpMyAdmin versions 5.x prior to 5.2.2

Description An issue has been discovered in the check tables feature of phpMyAdmin, where a crafted table or database name could be used for XSS. This allows for potential exploitation of the XSS weakness.

Recommendations To protect databases from remote exploitation, update to version 5.2.2. As a temporary workaround, consider restricting the use of crafted table or database names in the check tables feature until a patch is applied.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

BDU:2025-14435

BIT-PHPMYADMIN-2025-24530

CVE-2025-24530

DLA-4121-1

GHSA-222V-CX2C-Q2F5

OPENSUSE-SU-2025:0081-1

OPENSUSE-SU-2025:14846-1

Produtos afetados

Debian

Red Os

Phpmyadmin

Referências · 41

• https://github.com/phpmyadmin/phpmyadmin · Nota
• https://github.com/phpmyadmin/phpmyadmin/commit/23c13a81709728089ff031e5b1c29b5e91baa6a7 · Nota
• https://t.me/cvedetector/16164 · Publicação no Telegram
• https://security-tracker.debian.org/tracker/source-package/phpmyadmin · Aviso do Fabricante
• https://suse.com/ko-kr/security/cve/CVE-2025-24530.html · Nota
• https://phpmyadmin.net/security/PMASA-2025-1 · Nota
• https://osv.dev/vulnerability/openSUSE-SU-2025:14846-1 · Aviso do Fabricante
• https://twitter.com/VulmonFeeds/status/1882323045529825745 · Publicação no Twitter
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-24530 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2025-24530 · Aviso do Fabricante
• https://twitter.com/FindSecCyber/status/1882760743185154330 · Publicação no Twitter
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-24530 · Aviso do Fabricante
• https://bugzilla.suse.com/1236312 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2025-24530 · Nota de Segurança
• https://redos.red-soft.ru/support/secure/uyazvimosti/support/secure/uyazvimosti/mnozhestvennye-uyazvimosti-phpmyadmin-cve-2025-24529-cve-2025-24530 · Nota