medium6.5
CVE-2023-0241
pgAdmin 4 vulnerable to directory traversal
Impact
pgAdmin 4 versions prior to v6.19 contains a directory traversal vulnerability. A user of the product may change another user's settings or alter the database.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| pip | pgadmin4 | <= 6.18 | 6.19 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Pgadmin | Pgadmin 4 | before 6.19 |
Weakness classification
References
- NVD record
- CVE.org record
- GitHub advisory
- https://github.com/pgadmin-org/pgadmin4/issues/5734
- https://jvn.jp/en/jp/JVN01398015/
- https://github.com/advisories/GHSA-9crj-hpxh-f6qg
- https://nvd.nist.gov/vuln/detail/CVE-2023-0241
- https://github.com/akshay-joshi/pgadmin4/commit/64d7289c5b3831137b17bb4c5022ef4f63d2ef42
- https://jvn.jp/en/jp/JVN01398015