Description
pgAdmin <= 8.8 has an installation Directory permission issue. Because of this issue, attackers can gain unauthorised access to the installation directory on the Debian or RHEL 8 platforms.
References (1)
Core 1
Core References
Issue Tracking, Patch issue-tracking
https://github.com/pgadmin-org/pgadmin4/issues/7605
Scores
CVSS v3
7.4
EPSS
0.0025
EPSS Percentile
15.6%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
partial
Details
CWE
CWE-276
Status
published
Products (1)
pgadmin/pgadmin_4
< 8.9
Published
Jun 25, 2024
Tracked Since
Feb 18, 2026