CVE-2022-4223

HIGHNuclei

pgadmin4 vulnerable to Code Injection

Title source: GitHub Advisory
STIX 2.1 vulnerability

Record summary

CVE-2022-4223 has a selected CVSS score of 8.8 (high); EIP currently links 1 Nuclei template.

Description

The pgAdmin server includes an HTTP API that is intended to be used to validate the path a user selects to external PostgreSQL utilities such as pg_dump and pg_restore. The utility is executed by the server to determine what PostgreSQL version it is from. Versions of pgAdmin prior to 6.17 failed to properly secure this API, which could allow an unauthenticated user to call it with a path of their choosing, such as a UNC path to a server they control on a Windows machine. This would cause an appropriately named executable in the target path to be executed by the pgAdmin server.

Description source: CVE List

Exploitation context

Available material

Nuclei templates
1

CISA SSVC decision

ExploitationNone
AutomatableNo
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated Apr 14, 2025 · Source: CVE List

Affected products and versions

2
ProductSourceVersion range

pgadmin4

CVE Listpgadmin4 6.17affected

pgadmin4

Browse PyPI / pgadmin4
GitHub AdvisoryBefore 6.17 · Fixed in 6.17affected

Nuclei templates

1
ProjectDiscoveryCRITICALpgAdmin < 6.17 - Unauthenticated Remote Code ExecutionCVSS 9.8

pgAdmin prior to 6.17 contains an insecure HTTP API caused by improper access control, letting unauthenticated users execute arbitrary external utilities via path manipulation, exploit requires no authentication.

Impact

Attackers can execute arbitrary external utilities on the server, potentially leading to remote code execution or system compromise.

Remediation

Update to version 6.17 or later to fix the security issue.

WeaknessesCWE-94CWE-862
Authors0x_Akoko
Template tagscvecve2022pgadminrceunauth
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Shodan: http.title:"pgAdmin"
FOFA: title="pgAdmin"
https://github.com/advisories/GHSA-3v6v-2x6p-32mc https://nvd.nist.gov/vuln/detail/CVE-2022-4223

Source: ProjectDiscovery

References

5