pgadmin_4 vulnerabilities

2 known vulnerabilities in pgadmin_4 from PostgreSQL. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  pgAdmin 4: Improper Neutralization of Special Elements used in a Command

  CVE-2024-3116Apr 4, 2024Pgadmin.orgEPSS 65.8%

  pgAdmin <= 8.4 is affected by a Remote Code Execution (RCE) vulnerability through the validate binary path API. This vulnerability allows attackers to execute arbitrary code on the server hosting PGAdmin, posing a severe risk to the database management system'

• 9.9 Critical severity

  pgAdmin 4: Path Traversal: 'dir....filename'

  CVE-2024-2044Mar 7, 2024Pgadmin.orgEPSS 79.5%

  pgAdmin <= 8.3 is affected by a path-traversal vulnerability while deserializing users’ sessions in the session handling code. If the server is running on Windows, an unauthenticated attacker can load and deserialize remote pickle objects and gain code executi