CVE catalog
CVE-2023-40619
DEBIAN-CVE-2023-40619
- Severity
- Unknown · CVSS 9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Published
- Updated
- Source
- [NVD] · [CVE record]
- EPSS
- 1.32% · Oct 25, 2026
phpPgAdmin 7.14.4 and earlier is vulnerable to deserialization of untrusted data which may lead to remote code execution because user-controlled data is directly passed to the PHP 'unserialize()' function in multiple places. An example is the functionality to manage tables in 'tables.php' where the 'ma[]' POST parameter is deserialized.
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Debian | phppgadmin | 13 | 7.14.7+dfsg-1 | fixed |
| Debian | phppgadmin | 14 | 7.14.7+dfsg-1 | fixed |
| Debian | phppgadmin | 10 | 5.1+ds-4 | vulnerable |
| Debian | phppgadmin | 10 | 5.1+ds-4+deb10u1 | fixed |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Debian | phppgadmin | deb | 13 | 7.14.7+dfsg-1 | Not reported | DEBIAN-CVE-2023-40619 | Not reported |
| Debian | phppgadmin | deb | 14 | 7.14.7+dfsg-1 | Not reported | DEBIAN-CVE-2023-40619 | Not reported |
| Debian | phppgadmin | deb | 10 | 5.1+ds-4+deb10u1 | Not reported | DLA-3644-1 | Not reported |
OpenFactory catalog packages
Matching against OpenFactory catalog package versions is in progress.