-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| phpmyadmin/phpmyadmin | composer | >= 4.6.0, < 4.6.5 | 4.6.5 |
| phpmyadmin/phpmyadmin | composer | >= 4.4.0, < 4.4.15.9 | 4.4.15.9 |
Miggo AIRoot Cause AnalysisThe vulnerability stems from PHP error messages containing the full path being written to export files during timeouts. The CVE explicitly references the 'fopen wrapper issue,' indicating improper error handling when using fopen() in export operations. In PHP, unhandled fopen errors (e.g., due to timeouts) generate warnings with full paths. The patches for this CVE (e.g., commits 6197613/cf83d6a) likely added error suppression (e.g., @fopen) or exception handling to prevent path leakage. While exact file paths aren't provided in the advisory, the export functionality's dependency on fopen() aligns with the described vulnerability mechanism.