Lucene search
GoogleOSV:GHSA-XV64-8P4R-94GQHistoryMay 02, 2024 - 6:30 p.m.
pgAdmin Cross-site Scripting vulnerability in /settings/store API response json payload
2024-05-0218:30:55
Google
osv.dev
4
pgadmin
cross-site scripting
api
json
vulnerability
client end
software
7.4 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L
6.1 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
9.1%
pgAdmin <= 8.5 is affected by XSS vulnerability in /settings/store API response json payload. This vulnerability allows attackers to execute malicious script at the client end.
Related
cvelist
cvelist
nvd
nvd
CVE-2024-4216
2024-05-02 18:15:07
cve
cve
CVE-2024-4216
2024-05-02 18:15:07
veracode
veracode
Cross-Site Scripting (XSS)
2024-05-06 07:00:32
vulnrichment
vulnrichment
github
github
fedora
fedora
[SECURITY] Fedora 40 Update: pgadmin4-8.6-1.fc40
2024-05-23 01:09:17
[SECURITY] Fedora 40 Update: python-libgravatar-1.0.4-1.fc40
2024-05-23 01:09:17
openvas
openvas
Fedora: Security Advisory for pgadmin4 (FEDORA-2024-4d4ceb61f7)
2024-05-27 00:00:00
Fedora: Security Advisory for python-libgravatar (FEDORA-2024-4d4ceb61f7)
2024-05-27 00:00:00
nessus
nessus
Fedora 40 : pgadmin4 / python-libgravatar (2024-4d4ceb61f7)
2024-05-23 00:00:00
7.4 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L
6.1 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
9.1%
Related for OSV:GHSA-XV64-8P4R-94GQ