En bref
- CVE-2024-9014 est une vulnérabilité MOYENNE (CVSS 6.5) touchant pgadmin4, pgadmin 4 (pgadmin).
- Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 9.7%, plus élevée que 95.5% des vulnérabilités.
- Correctif : mettre à jour vers 8.12 ou plus récent.
Description
pgAdmin versions 8.11 and earlier are vulnerable to a security flaw in OAuth2 authentication. This vulnerability allows an attacker to potentially obtain the client ID and secret, leading to unauthorized access to user data.
NVD description
pgAdmin versions 8.11 and earlier are vulnerable to a security flaw in OAuth2 authentication. This vulnerability allows an attacker to potentially obtain the client ID and secret, leading to unauthorized access to user data.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free