18 Sep
2019
18 Sep
'19
1:55 p.m.
It “seems" it would be an easy fix. According to the original poster it says he
alerted the development team.
I searched the archive and maybe he private messaged a couple developers?
https://www.cvedetails.com/cve/CVE-2019-12922/
<https://www.cvedetails.com/cve/CVE-2019-12922/>
https://seclists.org/fulldisclosure/2019/Sep/23
<https://seclists.org/fulldisclosure/2019/Sep/23>
The bug would have very low probability of exploit. You would have to be logged into an
existing phpmyadmin session and simultaneously trick the user to click on a link while in
the setup stage.
Thought I would post here that the bug is publicly posted.
Thanks,
Todd
P.S. Enjoy phpmyadmin. Been using it off and on over a decade.