Lucene search

RedosROS-20231011-01

HistoryOct 11, 2023 - 12:00 a.m.

ROS-20231011-01

2023-10-1100:00:00

redos.red-soft.ru

pgadmin 4

http api

vulnerability

remote attackers

arbitrary commands

server

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.7

Confidence

Low

EPSS

0.001

Percentile

28.0%

JSON

A vulnerability in the HTTP API of the pgAdmin 4 database management tool is related to insufficient input data validation.
verification of input data. Exploitation of the vulnerability could allow an attacker acting remotely,
execute arbitrary commands on the server

OSVersionArchitecturePackageVersionFilename
redos7.3x86_64pgadmin4< 6.19-2UNKNOWN

OS	Version	Architecture	Package	Version	Filename
redos	7.3	x86_64	pgadmin4	< 6.19-2	UNKNOWN

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.7

Confidence

Low

EPSS

0.001

Percentile

28.0%

JSON

Related for ROS-20231011-01