CVE-2013-5029

Description

phpMyAdmin 3.5.x and 4.0.x before 4.0.5 allows remote attackers to bypass the clickjacking protection mechanism via certain vectors related to Header.class.php.

How to fix CVE-2013-5029

To remediate CVE-2013-5029, upgrade the affected package to a fixed version below.

• Debian/phpmyadmin—upgrade to 4:4.0.5-1 or later

Is CVE-2013-5029 being exploited?

Low — EPSS is 1.7%, meaning exploitation activity has not been observed at scale.

Affected packages (1)

• from 0, < 4:4.0.5-1

References (1)

• ADVISORYsecurity-tracker.debian.org/tracker/CVE-2013-5029