GitHub Advisoryadvisory · PyPI

GHSA-3v6v-2x6p-32mc pgadmin4 vulnerable to Code Injection

HIGH Published 2022-12-13 Modified 2025-03-17 Official page ↗
Aliases
CVE-2022-4223
Ecosystem
PyPI
Packages
pgadmin4
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weaknesses
CWE-862, CWE-94
Reviewed
2022-12-19

Affected packages

• PyPI pgadmin4: < 6.17 → fixed in 6.17

Description

The pgAdmin server includes an HTTP API that is intended to be used to validate the path a user selects to external PostgreSQL utilities such as pg_dump and pg_restore. The utility is executed by the server to determine what PostgreSQL version it is from. Versions of pgAdmin prior to 6.17 failed to properly secure this API, which could allow an unauthenticated user to call it with a path of their choosing, such as a UNC path to a server they control on a Windows machine. This would cause an appropriately named executable in the target path to be executed by the pgAdmin server.

Related

Alias · CVE (1)

  • CVE-2022-4223 The pgAdmin server includes an HTTP API that is intended to be used to validate the path a user selects to external PostgreSQL utilities… vulnerability

Weakness · CWE (2)

  • CWE-862 Missing Authorization weakness
  • CWE-94 Improper Control of Generation of Code weakness

References