CVE-2020-11441

EPSS 2.3%

Vexday Risk Score

18Bajo

Decisión SSVC (CISA)

Attend

PoC disponible → seguir de cerca

Madurez del exploit

Exploit funcional

Exploit automatizable disponible (Nuclei/Metasploit).

CVSS —EPSS 2.3%KEV nãoPoC —Nuclei simMetasploit —Patch —

Ciclo de vida

31 mar 2020Publicada en NVD

Recomendación: Planificar corrección próxima — ya existe PoC pública.

phpMyAdmin 5.0.2 allows CRLF injection, as demonstrated by %0D%0Astring%0D%0A inputs to login form fields causing CRLF sequences to be reflected on an error page. NOTE: the vendor states "I don't see anything specifically exploitable.

Productos afectados

n/a · n/a

Referencias

https://github.com/phpmyadmin/phpmyadmin/issues/16056