-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe vulnerability description explicitly identifies the suggestPassword function in js/functions.js as the source. The commit diff shows this function originally used Math.random() directly for password generation. Cryptographic security requires cryptographically secure random number generators (CSPRNG), and Math.random() is known to be insufficient for this purpose. The patch replaces this with window.crypto.getRandomValues where available, confirming the original implementation was vulnerable.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| phpmyadmin/phpmyadmin | composer | >= 4.0.0, < 4.0.10.13 | 4.0.10.13 |
| phpmyadmin/phpmyadmin | composer | >= 4.4.0, < 4.4.15.3 | 4.4.15.3 |
| phpmyadmin/phpmyadmin | composer | >= 4.5.0, < 4.5.4 | 4.5.4 |
PHPPHPKEV Misses 88% of Exploited CVEs- Get the report