VulnerabilityAnalyzed
CVE-2024-9014
pgAdmin versions 8.11 and earlier are vulnerable to a security flaw in OAuth2 authentication.
MEDIUM 6.5EPSS 9.69%
Does this matter?
Lower severity and a low EPSS score (9.69%). Track it; it rarely justifies an emergency change on its own.
Description
pgAdmin versions 8.11 and earlier are vulnerable to a security flaw in OAuth2 authentication. This vulnerability allows an attacker to potentially obtain the client ID and secret, leading to unauthorized access to user data.
- CVSS 3.1
- 6.5 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- EPSS
- 9.69% probability · 95th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-522
- Affected
- pgadmin/pgadmin 4
- Source
- f86ef6dc-4d3a-42ad-8f28-e6d5547a5007
References
- https://github.com/pgadmin-org/pgadmin4/issues/7945Issue Tracking
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.