Skip to content

Vendor

pgadmin vulnerabilities

1 published CVE affecting pgadmin, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
0
Medium
1
Low
0
Unscored
0
CISA KEV
0
Atom feed of pgadmin alerts

Products

Latest pgadmin CVEs

Newest publication first

  1. CVE-2023-5002 Pgadmin4: remote code execution by an authenticated user

    Published
    MediumCVSS 6.0

    A flaw was found in pgAdmin. This issue occurs when the pgAdmin server HTTP API validates the path a user selects to external PostgreSQL utilities such as pg_dump and pg_restore. Versions of pgAdmin prior to 7.6 failed to properly control the server code executed on this API, all...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.