En bref
- CVE-2025-12762 est une vulnérabilité CRITIQUE (CVSS 9.8) touchant pgadmin4, pgadmin 4 (pgadmin).
- Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 12.7%, plus élevée que 96.3% des vulnérabilités.
- Correctif : mettre à jour vers 9.10 ou plus récent.
Description
pgAdmin versions up to 9.9 are affected by a Remote Code Execution (RCE) vulnerability that occurs when running in server mode and performing restores from PLAIN-format dump files. This issue allows attackers to inject and execute arbitrary commands on the server hosting pgAdmin, posing a critical risk to the integrity and security of the database management system and underlying data.
NVD description
pgAdmin versions up to 9.9 are affected by a Remote Code Execution (RCE) vulnerability that occurs when running in server mode and performing restores from PLAIN-format dump files. This issue allows attackers to inject and execute arbitrary commands on the server hosting pgAdmin, posing a critical risk to the integrity and security of the database management system and underlying data.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free