Lalith Rallabhandi

Name of the Vulnerable Software and Affected Versions: OmniAuth versions prior to 1.3.2 Description: The issue arises from improper protection of the authenticity token value in OmniAuth. Specifically, in the strategy.rb file, POST parameters, in addition to GET parameters, are stored in the session and become accessible in the environment during the callback phase. Recommendations: For versions prior to 1.3.2, update to version 1.3.2 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** phpMyAdmin versions 4.4.x through 4.4.15.0 phpMyAdmin versions 4.5.x through 4.5.0 **Description** The issue is related to the redirection feature in the url.php file, which allows remote attackers to spoof content. This is achieved by manipulating the `url` parameter. **Recommendations** For phpMyAdmin versions 4.4.x through 4.4.15.0, update to version 4.4.15.1 or later. For phpMyAdmin versions 4.5.x through 4.5.0, update to version 4.5.1 or later.