pgadmin4 vulnerabilities (PyPI)
28 vulnerabilities.
-
pgadmin4PyPI pgAdmin 4: Account-lockout bypass via Flask-Security default /login view 6.9 Medium -
pgadmin4PyPI pgAdmin 4: Symbolic-link path traversal in File Manager allows arbitrary file write 7.2 High -
pgadmin4PyPI pgAdmin 4: Unsafe deserialization (CWE-502) in file-backed session manager leads to remote code execution 7.3 High -
pgadmin4PyPI pgAdmin 4: Local file inclusion and server-side request forgery in LLM API configuration endpoints 7.1 High -
pgadmin4PyPI pgAdmin 4: OS command injection in Import/Export query export via psql metacommand breakout 8.7 High -
pgadmin4PyPI pgAdmin 4: SQL injection in Maintenance tool option values leading to remote code execution 8.7 High -
pgadmin4PyPI pgAdmin 4: Stored XSS via crafted PostgreSQL object names in Browser Tree and Explain Visualizer 4.8 Medium -
pgadmin4PyPI pgAdmin 4: Cross-user data access and shared-server privilege escalation in server mode 9.4 Critical -
pgadmin4PyPI Restore restriction bypass via key disclosure vulnerability (pgAdmin 4) 7.4 High -
pgadmin4PyPI Remote Code Execution vulnerability when restoring PLAIN-format SQL dumps in server mode (pgAdmin 4) 9.1 Critical -
pgadmin4PyPI pgAdmin 4: LDAP authentication flow vulnerable to TLS certificate verification bypass. 7.5 High -
pgadmin4PyPI pgAdmin 4: LDAP injection vulnerability in LDAP authentication flow. 7.5 High -
pgadmin4PyPI Command injection vulnerability allowing arbitrary command execution on Windows 6.8 Medium -
pgadmin4PyPI Remote Code Execution vulnerability when restoring PLAIN-format SQL dumps in server mode (pgAdmin 4) 9.1 Critical -
pgadmin4PyPI Cross-Origin Opener Policy Vulnerability in pgAdmin 4 7.9 High -
pgadmin4PyPI Cross-Site Vulnerability(XSS) due to arbitrary HTML/JavaScript gets executed while query result rendering in Query Tool and View/Edit Data Tool of pgAdmin 4 9.1 Critical -
pgadmin4PyPI pgAdmin 4: Remote Code Execution in Query Tool and Cloud Deployment 9.9 Critical -
pgadmin4PyPI Pgadmin: users authenticated simultaneously via ldap may be attached to the wrong session 8.0 High -
pgadmin4PyPI OAuth2 client id and secret exposed through the web browser in pgAdmin 4 9.9 Critical -
pgadmin4PyPI XSS vulnerability in /settings/store API response json payload in pgAdmin 4 7.4 High -
pgadmin4PyPI The Multi Factor Authentication bypass vulnerability in pgAdmin 4 7.4 High -
pgadmin4PyPI Remote Code Execution Vulnerability through the validate binary path API in pgAdmin 4 7.4 High -
pgadmin4PyPI Unsafe Deserialisation and Remote Code Execution by an Authenticated user in pgAdmin 4 9.9 Critical -
pgadmin4PyPI Pgadmin4: remote code execution by an authenticated user 6.0 Medium -
pgadmin4PyPI pgAdmin 4 vulnerable to directory traversal 6.5 Medium -
pgadmin4PyPI pgAdmin 4 Open Redirect vulnerability 6.1 Medium -
pgadmin4PyPI pgadmin4 vulnerable to Code Injection 8.8 High -
pgadmin4PyPI pgAdmin 4 Path Traversal vulnerability 6.5 Medium