PT-2022-13558 · Pgadmin 4+2 · Pgadmin 4+2

Sandipan Roy · Published 2022-03-16 · Updated 2025-03-17 · CVE-2022-0959

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions pgAdmin 4 (affected versions not specified)

Description A malicious, but authorized and authenticated user can construct an HTTP request using their existing CSRF token and session cookie to manually upload files to any location that the operating system user account under which pgAdmin is running has permission to write. This is possible due to the lack of validation of the upload path in the URI to which upload requests are made, allowing path traversal techniques to be used to store files outside of the storage directory.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Unrestricted File Upload

Path traversal

Weakness Enumeration

CWE-434

CWE-22

Related Identifiers

CVE-2022-0959

GHSA-CR8C-972V-RMP3

MGASA-2022-0257

OPENSUSE-SU-2022_1541-1

OPENSUSE-SU-2024:13667-1

SUSE-SU-2022:1541-1

SUSE-SU-2022_1541-1

Affected Products

Pgadmin

Suse

Pgadmin 4

References · 18

• https://nvd.nist.gov/vuln/detail/CVE-2022-0959 · Security Note
• https://osv.dev/vulnerability/GHSA-cr8c-972v-rmp3 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2022-0257 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:13667-1 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2022-0257.html · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2022:1541-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-0959 · Vendor Advisory
• https://github.com/pgadmin-org/pgadmin4 · Note
• https://github.com/pgadmin-org/pgadmin4/commit/dccd4f0bbaafa783d9f0360c7592b128d5cc3928 · Note
• https://bugs.mageia.org/show_bug.cgi?id=30385 · Note
• https://bugzilla.suse.com/1197143 · Note
• https://suse.com/support/update/announcement/2022/suse-su-20221541-1 · Note
• https://suse.com/security/cve/CVE-2022-0959 · Note
• https://suse.com/security/cve/CVE-2023-0241 · Note
• https://t.me/cvenotify/115054 · Telegram Post