CVE-2023-0241
MEDIUMpgAdmin 4 < 6.19 - Path Traversal and Arbitrary File Write
Title source: llmDescription
pgAdmin 4 versions prior to v6.19 contains a directory traversal vulnerability. A user of the product may change another user's settings or alter the database.
References (2)
Core 2
Core References
Issue Tracking, Patch
https://github.com/pgadmin-org/pgadmin4/issues/5734
Third Party Advisory, VDB Entry
https://jvn.jp/en/jp/JVN01398015/
Scores
CVSS v3
6.5
EPSS
0.0883
EPSS Percentile
94.5%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
CISA SSVC
Vulnrichment
Exploitation
poc
Automatable
no
Technical Impact
partial
Details
CWE
CWE-22
Status
published
Products (2)
pgadmin/pgadmin_4
< 6.19
pypi/pgadmin4
0 - 6.19PyPI
Published
Mar 27, 2023
Tracked Since
Feb 18, 2026