Postgresql Pgadmin vulnerabilities

• pgadmin 4, pgadmin.org pgadmin 4 +1 more OAuth2 client id and secret exposed through the web browser in pgAdmin 4 CVE-2024-9014 Public exploitFix available 9.9 CriticalSeptember 23, 2024
• pgadmin 4, pgadmin.org pgadmin 4, postgresql pgadmin +1 more +3 more XSS vulnerability in /settings/store API response json payload in pgAdmin 4 CVE-2024-4216 Fix available 7.4 HighMay 2, 2024
• pgadmin 4, pgadmin.org pgadmin 4, postgresql pgadmin +1 more +3 more The Multi Factor Authentication bypass vulnerability in pgAdmin 4 CVE-2024-4215 Fix available 7.4 HighMay 2, 2024
• pgadmin 4, pgadmin.org pgadmin 4, fedoraproject fedora +2 more Remote Code Execution Vulnerability through the validate binary path API in pgAdmin 4 CVE-2024-3116 Public exploitFix available EPSS 65.8% 7.4 HighApril 4, 2024
• pgadmin 4, pgadmin.org pgadmin 4, fedoraproject fedora +2 more Unsafe Deserialisation and Remote Code Execution by an Authenticated user in pgAdmin 4 CVE-2024-2044 Public exploitFix available EPSS 79.5% 9.9 CriticalMarch 7, 2024