PT-2023-5414 · Pgadmin+1 · Pgadmin+1

Stefan Grönke · Publicado 2023-09-22 · Atualizado 2025-03-17 · CVE-2023-5002

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions pgAdmin versions prior to 7.7

Description The issue occurs when the pgAdmin server HTTP API validates the path a user selects to external PostgreSQL utilities such as pg dump and pg restore. This allows an authenticated user to run arbitrary commands on the server due to insufficient input validation. Approximately 5,294 results are affected, according to ZoomEyeDork.

Recommendations For pgAdmin versions prior to 7.7, update to version 7.7 or later to resolve the issue. As a temporary workaround, consider restricting access to the pgAdmin server HTTP API to minimize the risk of exploitation. Avoid using the API endpoint that validates the path to external PostgreSQL utilities until the issue is resolved.

Correção

RCE

OS Command Injection

Enumeração de Fraquezas

CWE-20

CWE-78

Identificadores relacionados

BDU:2023-06044

CVE-2023-5002

GHSA-GHP8-52VX-77J4

OPENSUSE-SU-2024:13379-1

Produtos afetados

Pgadmin

Red Os

Referências · 25

• https://github.com/pgadmin-org/pgadmin4 · Nota
• https://github.com/pgadmin-org/pgadmin4/issues/6763 · Correção
• https://github.com/pgadmin-org/pgadmin4/commit/35f05e49b3632a0a674b9b36535a7fe2d93dd0c2 · Nota
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/VIRTMQZEE6K7RD37ERZ2UFYFLEUXLQU3 · Aviso do Fabricante
• https://redos.red-soft.ru/support/secure/uyazvimosti/support/secure/uyazvimosti/uyazvimost-pgadmin-cve-2023-5002 · Nota
• https://suse.com/security/cve/CVE-2023-5002 · Nota
• https://t.me/pentestingnews/39694 · Publicação no Telegram
• https://t.me/cvenotify/58428 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2023-5002 · Aviso do Fabricante
• https://twitter.com/CybachOy/status/1707081529493533017 · Publicação no Twitter
• https://t.me/cvenotify/58445 · Publicação no Telegram
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/2S24D3S2GVNGTDNE6SF2OQSOPU3H72UW · Aviso do Fabricante
• https://bugzilla.redhat.com/show_bug.cgi?id=2239164 · Nota
• https://twitter.com/HunterMapping/status/1706987052896522303 · Publicação no Twitter
• https://osv.dev/vulnerability/openSUSE-SU-2024:13379-1 · Aviso do Fabricante