CVE-2024-3116

HIGH7.4EPSS 90.7%

pgAdmin Remote Code Execution (RCE) vulnerability

發布日:2024/4/4修改日:2025/3/14
也稱為:GHSA-27jx-ffw8-xrqv

描述

pgAdmin <= 8.4 is affected by a Remote Code Execution (RCE) vulnerability through the validate binary path API. This vulnerability allows attackers to execute arbitrary code on the server hosting PGAdmin, posing a severe risk to the database management system's integrity and the security of the underlying data.

受影響套件(1)

CVSS 分數

來源版本嚴重程度向量
osvCVSS 3.1HIGH7.4CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L

參考連結(7)