Khushboovashi
·
Published
2025-09-04
·
Updated
2025-09-04
·
CVE-2025-9636
7.9
High
| Base vector | Vector | AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:L |
Name of the Vulnerable Software and Affected Versions:
pgAdmin versions prior to 9.7
Description:
pgAdmin is susceptible to a Cross-Origin Opener Policy (COOP) issue. This allows manipulation of the OAuth flow, potentially resulting in unauthorized account access, account takeover, data breaches, and privilege escalation.
Recommendations:
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Origin Validation Error