CVE-2023-0241 | BDVDB-2026-198331 Detail

pgadmin

Description#

pgAdmin 4 versions prior to v6.19 contains a directory traversal vulnerability. A user of the product may change another user's settings or alter the database.

Impact#

No impact statement in the source data.

Weaknesses#

CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

References#

https://github.com/pgadmin-org/pgadmin4/issues/5734
https://jvn.jp/en/jp/JVN01398015/

Exploit#

No public exploit known

History#

Version 12023-03-27Record published in the CVE List.
Version 22025-02-19Most recent update recorded in the CVE List.