pgAdmin 4 versions prior to v6.19 contains a directory traversal vulnerability. A user of the product may change another user's settings or alter the database.
References:GSA_kwCzR0hTQS05Y3JqLWhweGgtZjZxZ84AAyWl
pgAdmin 4 vulnerable to directory traversal
| Affected Packages | Affected Versions | Fixed Versions | |
|---|---|---|---|
|
pypi:pgadmin4
PURL:
pkg:pypi/pgadmin4
|
<= 6.18 | 6.19 | |
Affected Version RangesAll affected versionsAll unaffected versions |
|||