CVE-2023-0241

2023-03-2700:00:00

CWE-22

redhat

www.cve.org

pgadmin

directory traversal

vulnerability

user settings

alter database

6.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

41.5%

JSON

pgAdmin 4 versions prior to v6.19 contains a directory traversal vulnerability. A user of the product may change another user’s settings or alter the database.

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "pgadmin",
    "versions": [
      {
        "version": "pgadmin 6.19",
        "status": "affected"
      }
    ]
  }
]