PRODUCT PROFILE

pgAdmin4

暂无产品描述。

关联漏洞

共找到 2 条公开漏洞记录

严重CVE-2022-42232026/01/30

pgAdmin < 6.17 - Unauthenticated Remote Code Execution

pgAdmin prior to 6.17 contains an insecure HTTP API caused by improper access control, letting unauthenticated users execute arbitrary external utilities via path manipulation, exploit requires no authentication.

pgAdmin4PoC 已收录

CVSS—

严重CVE-2024-90142024/03/15

pgAdmin 4 - Authentication Bypass

pgAdmin 4 versions 8.11 and earlier are vulnerable to a security flaw in OAuth2 authentication. This vulnerability allows an attacker to potentially obtain the client ID and secret, leading to unauthorized access to user data.

pgAdmin4PoC 已收录

CVSS9.9EPSS 92.3%