CVE-2024-2044
CRITICALpgAdmin4 < 8.4 - Unauthenticated Path Traversal and Remote Code Execution via Session Deserialization
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2024-2044.
PoCs published by Spencer McIntyre, Davide Silvetti, Abdel Adim Oisfi, including Metasploit module exploits/multi/http/pgadmin_session_deserialization.
AI-analyzed exploit summary This Metasploit module exploits a path traversal vulnerability in pgAdmin's session management to achieve remote code execution via deserialization of a malicious Python object. It supports both authenticated (file upload) and unauthenticated (SMB UNC path) techniques.
Description
pgAdmin <= 8.3 is affected by a path-traversal vulnerability while deserializing users’ sessions in the session handling code. If the server is running on Windows, an unauthenticated attacker can load and deserialize remote pickle objects and gain code execution. If the server is running on POSIX/Linux, an authenticated attacker can upload pickle objects, deserialize them, and gain code execution.
Exploits (1)
This Metasploit module exploits a path traversal vulnerability in pgAdmin's session management to achieve remote code execution via deserialization of a malicious Python object. It supports both authenticated (file upload) and unauthenticated (SMB UNC path) techniques.
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H