PT-2023-2031 · Pgadmin 4+3 · Pgadmin 4+3
Yuji Tounai
·
Publicado
2023-01-13
·
Atualizado
2025-04-17
·
CVE-2023-0241
CVSS v3.1
6.5
Média
| Vetor | AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N |
Name of the Vulnerable Software and Affected Versions
pgAdmin 4 versions prior to v6.19
Description
The issue is related to a directory traversal vulnerability in pgAdmin 4. This vulnerability can be exploited by a remote attacker to change another user's settings or alter the database. The vulnerability is associated with insufficient restrictions on the path name to a directory with limited access.
Recommendations
For pgAdmin 4 versions prior to v6.19, update to version v6.19 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive directories and limiting user privileges to minimize the risk of exploitation.
Correção
Path traversal
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Pgadmin
Red Os
Suse
Pgadmin 4