MGASA-2023-0049: phpmyadmin Mageia

Published
Published 14-02-2023Last modified 16-04-2026

Vulnerability summary

MGASA-2023-0049 is a vulnerability in phpmyadmin Mageia with no CVSS score yet.

Overall risk
0/100
0100
Minimal · default modelHow is this calculated?
CVSS score
Not scored
010
No CVSS score recorded
EPSS scoreNot scoredRisk metrics not yet published.
KEVNot listedNot listed by any tracked catalog.
RansomwareNot flaggedNo ransomware use recorded.
Public exploits0No public exploits recorded

Timeline

  1. 14-02-2023
    PublishedVulnerability first disclosed.
  2. 16-04-2026
    Last modifiedVulnerability information updated.

Description

Updated phpmyadmin packages fix security vulnerability Security fix for an XSS vulnerability in the drag-and-drop upload functionality (PMASA-2023-01) Additional bugfixes including - issue #17506 Fix error when configuring 2FA without XMLWriter or Imagick issue #17519 Fix Export pages not working in certain conditions issue #17121 Fix password_hash function incorrectly adding single quotes to password before hashing issue #17736 Add utf8mb3 as an alias of utf8 on the charset description page issue #17248 Support the UUID data type for MariaDB >= 10.7 issue #16042 Fixes malformed downloads when using gzip compression type and FireFox browser Add `spellcheck="false"` to all password fields and some text fields to avoid spell-jacking data leaks Fixes for JavaScript errors when using Designer Fixes for PHP 8.2 compatibility

CVSS metrics

Risk metrics not yet published.

EPSS trend

No EPSS score has been published for this record yet.

Known exploited

Compare KEV catalogs
CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Mageia1 product
  • phpmyadmin< 5.2.1-1.mga8

1 vendor · 1 product

References

3 links