Pgadmin vulnerabilities
We track 3 vulnerabilities in Pgadmin products across 2 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on January 9, 2025.
Latest Pgadmin vulnerabilities
- 7.5 High severity
Pgadmin: Exposure of Data Element to Wrong Session
A vulnerability was found in pgadmin. Users logging into pgAdmin running in server mode using LDAP authentication may be attached to another user's session if multiple connection attempts occur simultaneously.
- 8.8 High severity
pgadmin: Improper Neutralization of Special Elements used in an OS Command
A flaw was found in pgAdmin. This issue occurs when the pgAdmin server HTTP API validates the path a user selects to external PostgreSQL utilities such as pg_dump and pg_restore. Versions of pgAdmin prior to 7.6 failed to properly control the server code execu
- 8.8 High severity
pgadmin4: Missing Authorization
The pgAdmin server includes an HTTP API that is intended to be used to validate the path a user selects to external PostgreSQL utilities such as pg_dump and pg_restore. The utility is executed by the server to determine what PostgreSQL version it is from. Vers