CVE-2020-11441: Injection Vulnerability

March 31, 2020 (updated April 2, 2020)

phpMyAdmin allows CRLF injection, as demonstrated by %0D%0Astring%0D%0A inputs to login form fields causing CRLF sequences to be reflected on an error page.

References

github.com/phpmyadmin/phpmyadmin/issues/16056
nvd.nist.gov/vuln/detail/CVE-2020-11441

Detect and mitigate CVE-2020-11441 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →