MGASA-2022-0257 Updated pgadmin4 packages fix security vulnerability

A malicious, but authorised and authenticated user can construct an HTTP request using their existing CSRF token and session cookie to manually upload files to any location that the operating system user account under which pgAdmin is running has permission to write. CVE-2022-0959 In addition,...

Updated pgadmin4 packages fix security vulnerability

A malicious, but authorised and authenticated user can construct an HTTP request using their existing CSRF token and session cookie to manually upload files to any location that the operating system user account under which pgAdmin is running has permission to write. CVE-2022-0959 In addition,...

CVE-2017-20052

A vulnerability classified as problematic was found in Python 2.7.13. This vulnerability affects unknown code of the component pgAdmin4. The manipulation leads to uncontrolled search path. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used...

CVE-2017-20052

A vulnerability classified as problematic was found in Python 2.7.13. This vulnerability affects unknown code of the component pgAdmin4. The manipulation leads to uncontrolled search path. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used...

Design/Logic Flaw

A vulnerability classified as problematic was found in Python 2.7.13. This vulnerability affects unknown code of the component pgAdmin4. The manipulation leads to uncontrolled search path. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used...

CVE-2017-20052

A vulnerability classified as problematic was found in Python 2.7.13. This vulnerability affects unknown code of the component pgAdmin4. The manipulation leads to uncontrolled search path. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used...

CVE-2017-20052 Python pgAdmin4 uncontrolled search path

A vulnerability classified as problematic was found in Python 2.7.13. This vulnerability affects unknown code of the component pgAdmin4. The manipulation leads to uncontrolled search path. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used...

CVE-2017-20052

CVE-2017-20052 concerns Python 2.7.13 in the pgAdmin4 stack, where DLL/SEARCH-PATH manipulation can cause remote arbitrary code execution via pgAdmin4 loading. Multiple connected sources confirm the vulnerability affects the pgAdmin4 component and Python runtime, with exploit details publicly dis...

CVE-2017-20052 Python pgAdmin4 uncontrolled search path

A vulnerability classified as problematic was found in Python 2.7.13. This vulnerability affects unknown code of the component pgAdmin4. The manipulation leads to uncontrolled search path. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used...

PT-2022-7925 · Postgresql +1 · Pgadmin4 +1

Name of the Vulnerable Software and Affected Versions: Python version 2.7.13 pgAdmin4 affected versions not specified Description: A problematic issue was found, affecting the pgAdmin4 component. This issue leads to an uncontrolled search path and can be initiated remotely. The exploit has been...

CVE-2017-20052: Uncontrolled Search Path Element

A vulnerability classified as problematic was found in Python 2.7.13. This vulnerability affects unknown code of the component pgAdmin4. The manipulation leads to uncontrolled search path. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used...

openSUSE: Security Advisory for pgadmin4 (SUSE-SU-2022:1541-1)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

SUSE: Security Advisory (SUSE-SU-2022:1541-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLES15 / openSUSE 15 Security Update : pgadmin4 (SUSE-SU-2022:1541-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:1541-1 advisory. - CVE-2022-0959: Fixed an unrestricted file upload bsc1197143. Tenable has extracted the preceding description block directly...

SUSE-SU-2022:1541-1 Security update for pgadmin4

This update for pgadmin4 fixes the following issues: - CVE-2022-0959: Fixed an unrestricted file upload bsc1197143...

faradaysec (>=3.14.1, <=3.14.4), flask-authoob (>=0.0.21, <=0.0.34) +4 more potentially affected by CVE-2021-32618 via flask-security-too (>=3.2.0rc1, <=4.0.1)

flask-security-too PYPI version =3.2.0rc1, =3.14.1, =0.0.21, =0.3.1, =4.22.0, =6.0.1, =6.0.0, =6.4.0 Source cves: CVE-2021-32618 Source advisory: SNYK:PYTHON-FLASKSECURITYTOO-1293190...

faradaysec (>=3.14.1, <=3.14.4), pgadmin4 (>=4.22.0, <=5.3.0) potentially affected by CVE-2021-32618 via flask-security-too (3.4.5)

flask-security-too PYPI version 3.4.5 is affected by a known vulnerability. The following packages have a transitive dependency on flask-security-too and may be impacted: - faradaysec =3.14.1, =4.22.0, =5.3.0 Source cves: CVE-2021-32618 Source advisory: OSV:GHSA-6QMF-FJ6M-686C...

faradaysec (>=3.14.1, <=3.14.4), pgadmin4 (>=4.22.0, <=5.3.0) potentially affected by CVE-2021-32618 via flask-security-too (3.4.5)

flask-security-too PYPI version 3.4.5 is affected by a known vulnerability. The following packages have a transitive dependency on flask-security-too and may be impacted: - faradaysec =3.14.1, =4.22.0, =5.3.0 Source cves: CVE-2021-32618 Source advisory: OSV:PYSEC-2021-123...