-
CVSS Score
-| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| phpmyadmin/phpmyadmin | composer | < 4.9.2 | 4.9.2 |
The vulnerability stems from unescaped output of Git metadata in HTML contexts. The patch adds htmlspecialchars() around variables like $commit_hash, $branch, $repobase, and $revision. Both identified functions directly handle Git version information display: