Pgadmin 4 vulnerabilities

2 known vulnerabilities in Pgadmin 4 from Pgadmin. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  pgadmin: Improper Neutralization of Special Elements used in an OS Command

  CVE-2023-5002Sep 22, 2023PgadminEPSS 1.78%

  A flaw was found in pgAdmin. This issue occurs when the pgAdmin server HTTP API validates the path a user selects to external PostgreSQL utilities such as pg_dump and pg_restore. Versions of pgAdmin prior to 7.6 failed to properly control the server code execu

• 8.8 High severity

  pgadmin4: Missing Authorization

  CVE-2022-4223Dec 13, 2022Pgadmin4EPSS 80.1%

  The pgAdmin server includes an HTTP API that is intended to be used to validate the path a user selects to external PostgreSQL utilities such as pg_dump and pg_restore. The utility is executed by the server to determine what PostgreSQL version it is from. Vers