CVE-2024-6238

概要

参考情報

• pgadmin-org/pgadmin4 · Issue Tracking

pgadmin 4 のその他の脆弱性

• CVE-2026-86864高 8.8pgAdmin 4's Backup tool appended the client-supplied 'database' field from the /backup/job/<sid>/object request to the pg_dump argument vect…
• CVE-2026-86863緊急 9.8pgAdmin 4's Webserver authentication source is intended to accept an identity asserted by the web server or reverse proxy in front of pgAdmi…
• CVE-2026-86862中 6.5pgAdmin 4's Restore and Maintenance tools passed the client-supplied 'database' field directly as the value of the --dbname option given to …
• CVE-2026-86861中 5.9pgAdmin 4's File Manager save_file endpoint, which backs saving from the Query Tool and ERD, validated the requested path with Filemanager.c…
• CVE-2026-17566緊急 9.9pgAdmin 4's Import/Export Data tool builds a psql \copy (...) command line by interpolating a user-supplied SQL query into a Jinja template …