MGASA-2023-0049
Updated phpmyadmin packages fix security vulnerability
Security fix for an XSS vulnerability in the drag-and-drop upload functionality (PMASA-2023-01)
Additional bugfixes including -
issue #17506 Fix error when configuring 2FA without XMLWriter or Imagick
issue #17519 Fix Export pages not working in certain conditions
issue #17121 Fix password_hash function incorrectly adding single quotes
to password before hashing
issue #17736 Add utf8mb3 as an alias of utf8 on the charset description
page
issue #17248 Support the UUID data type for MariaDB >= 10.7
issue #16042 Fixes malformed downloads when using gzip compression type
and FireFox browser
Add spellcheck="false" to all password fields and some text fields to
avoid spell-jacking data leaks
Fixes for JavaScript errors when using Designer
Fixes for PHP 8.2 compatibility
What each source reports
OSV No score
Updated phpmyadmin packages fix security vulnerability
Security fix for an XSS vulnerability in the drag-and-drop upload functionality (PMASA-2023-01)
Additional bugfixes including -
issue #17506 Fix error when configuring 2FA without XMLWriter or Imagick
issue #17519 Fix Export pages not working in certain conditions
issue #17121 Fix password_hash function incorrectly adding single quotes
to password before hashing
issue #17736 Add utf8mb3 as an alias of utf8 on the charset description
page
issue #17248 Support the UUID data type for MariaDB >= 10.7
issue #16042 Fixes malformed downloads when using gzip compression type
and FireFox browser
Add spellcheck="false" to all password fields and some text fields to
avoid spell-jacking data leaks
Fixes for JavaScript errors when using Designer
Fixes for PHP 8.2 compatibility
- Record
MGASA-2023-0049- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
phpmyadminMageia:8 |
before 5.2.1-1.mga8 | 5.2.1-1.mga8 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
MGASA-2023-0049 is a vulnerability with no CVSS score yet in phpmyadmin, published February 14, 2023. No source lists public exploit code. Fixed in phpmyadmin 5.2.1-1.mga8.