Lucene search
GitHub Advisory DatabaseGHSA-XV64-8P4R-94GQHistoryMay 02, 2024 - 6:30 p.m.
pgAdmin Cross-site Scripting vulnerability in /settings/store API response json payload
2024-05-0218:30:55
CWE-79
GitHub Advisory Database
github.com
7
pgadmin
cross-site scripting
api
vulnerability
json payload
attackers
7.4 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L
6.3 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
9.1%
pgAdmin <= 8.5 is affected by XSS vulnerability in /settings/store API response json payload. This vulnerability allows attackers to execute malicious script at the client end.
Affected configurations
Node
pgadmin4Range≤8.5
References
Related
cvelist
cvelist
nvd
nvd
CVE-2024-4216
2024-05-02 18:15:07
cve
cve
CVE-2024-4216
2024-05-02 18:15:07
osv
osv
veracode
veracode
Cross-Site Scripting (XSS)
2024-05-06 07:00:32
vulnrichment
vulnrichment
fedora
fedora
[SECURITY] Fedora 40 Update: pgadmin4-8.6-1.fc40
2024-05-23 01:09:17
[SECURITY] Fedora 40 Update: python-libgravatar-1.0.4-1.fc40
2024-05-23 01:09:17
openvas
openvas
Fedora: Security Advisory for pgadmin4 (FEDORA-2024-4d4ceb61f7)
2024-05-27 00:00:00
Fedora: Security Advisory for python-libgravatar (FEDORA-2024-4d4ceb61f7)
2024-05-27 00:00:00
nessus
nessus
Fedora 40 : pgadmin4 / python-libgravatar (2024-4d4ceb61f7)
2024-05-23 00:00:00
7.4 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L
6.3 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
9.1%
Related for GHSA-XV64-8P4R-94GQ