mirror of
git://git.openembedded.org/meta-openembedded
synced 2026-11-03 22:01:21 +00:00
Changqing Li
880df90c86
CVE-2025-24529: An issue was discovered in phpMyAdmin 5.x before 5.2.2. An XSS vulnerability has been discovered for the Insert tab. Refer: https://nvd.nist.gov/vuln/detail/CVE-2025-24529 CVE-2025-24530: An issue was discovered in phpMyAdmin 5.x before 5.2.2. An XSS vulnerability has been discovered for the check tables feature. A crafted table or database name could be used for XSS. Refer: https://nvd.nist.gov/vuln/detail/CVE-2025-24530 Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
37 lines
1.5 KiB
Diff
37 lines
1.5 KiB
Diff
From a8e215c314a98008aab6f3147a409911be73108e Mon Sep 17 00:00:00 2001
|
|
From: =?UTF-8?q?Maur=C3=ADcio=20Meneghini=20Fauth?= <mauricio@mfauth.net>
|
|
Date: Sun, 12 Jan 2025 22:39:06 -0300
|
|
Subject: [PATCH 1/2] Fix XSS vulnerability on Insert page
|
|
MIME-Version: 1.0
|
|
Content-Type: text/plain; charset=UTF-8
|
|
Content-Transfer-Encoding: 8bit
|
|
|
|
Signed-off-by: Maurício Meneghini Fauth <mauricio@mfauth.net>
|
|
|
|
CVE: CVE-2025-24529
|
|
Upstream-Status: Backport [https://github.com/phpmyadmin/phpmyadmin/commit/7355ddff8d1da9453cf43c09a45666157b16103d]
|
|
|
|
Signed-off-by: Changqing Li <changqing.li@windriver.com>
|
|
---
|
|
libraries/classes/InsertEdit.php | 4 ++--
|
|
1 file changed, 2 insertions(+), 2 deletions(-)
|
|
|
|
diff --git a/libraries/classes/InsertEdit.php b/libraries/classes/InsertEdit.php
|
|
index abc3c5f..4bde765 100644
|
|
--- a/libraries/classes/InsertEdit.php
|
|
+++ b/libraries/classes/InsertEdit.php
|
|
@@ -2166,8 +2166,8 @@ class InsertEdit
|
|
} elseif ($trueType === 'binary' || $trueType === 'varbinary') {
|
|
$special_chars = bin2hex($column['Default']);
|
|
} elseif (substr($trueType, -4) === 'text') {
|
|
- $textDefault = substr($column['Default'], 1, -1);
|
|
- $special_chars = stripcslashes($textDefault !== false ? $textDefault : $column['Default']);
|
|
+ $textDefault = (string) substr($column['Default'], 1, -1);
|
|
+ $special_chars = htmlspecialchars(stripcslashes($textDefault !== '' ? $textDefault : $column['Default']));
|
|
} else {
|
|
$special_chars = htmlspecialchars($column['Default']);
|
|
}
|
|
--
|
|
2.34.1
|
|
|