CVE-2023-0241
MEDIUM6.5EPSS 2.6%pgAdmin 4 vulnerable to directory traversal
Published: 3/27/2023Modified: 3/17/2025
Also known as:GHSA-9crj-hpxh-f6qg
Description
pgAdmin 4 versions prior to v6.19 contains a directory traversal vulnerability. A user of the product may change another user's settings or alter the database.
Affected packages (1)
- PyPI/pgadmin4from 0, < 6.19
CVSS scores
| Source | Version | Severity | Vector |
|---|---|---|---|
| osv | CVSS 3.1 | MEDIUM6.5 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N |