Lucene search
Redhat.comRH:CVE-2022-0959HistoryMay 20, 2022 - 10:37 p.m.
CVE-2022-0959
2022-05-2022:37:42
redhat.com
access.redhat.com
29
csrf attack
file upload
session cookie
EPSS
0.001
Percentile
26.9%
A malicious, but authorised and authenticated user can construct an HTTP request using their existing CSRF token and session cookie to manually upload files to any location that the operating system user account under which pgAdmin is running has permission to write.
Related
osv
osv
CVE-2022-0959
2022-03-16 15:15:16
pgAdmin 4 Path Traversal vulnerability
2022-03-17 00:00:24
pgadmin4-8.2-1.1 on GA media
2024-06-15 00:00:00
nessus
nessus
SUSE SLES15 Security Update : pgadmin4 (SUSE-SU-2022:1541-1)
2022-05-05 00:00:00
veracode
veracode
Path Traversal
2024-04-16 09:18:01
openvas
openvas
openSUSE: Security Advisory for pgadmin4 (SUSE-SU-2022:1541-1)
2022-05-17 00:00:00
SUSE: Security Advisory (SUSE-SU-2022:1541-1)
2022-05-05 00:00:00
Mageia: Security Advisory (MGASA-2022-0257)
2022-07-14 00:00:00
mageia
mageia
Updated pgadmin4 packages fix security vulnerability
2022-07-13 23:44:07
nvd
nvd
CVE-2022-0959
2022-03-16 15:15:16
cvelist
cvelist
CVE-2022-0959
2022-03-16 14:03:38
cve
cve
CVE-2022-0959
2022-03-16 15:15:16
suse
suse
Security update for pgadmin4 (important)
2022-05-04 00:00:00
prion
prion
Cross site request forgery (csrf)
2022-03-16 15:15:00
github
github
pgAdmin 4 Path Traversal vulnerability
2022-03-17 00:00:24