7.4
Élevée
CVE-2024-3116 pgAdmin <= 8.4 is affected by a Remote Code Execution (RCE) vulnerability through the validate binary path API
Description
pgAdmin <= 8.4 is affected by a Remote Code Execution (RCE) vulnerability through the validate binary path API. This vulnerability allows attackers to execute arbitrary code on the server hosting PGAdmin, posing a severe risk to the database management system's integrity and the security of the underlying data.
Produits et versions touchés
Autres CVE de pgAdmin 4
Les 56 CVE de pgAdmin 4 →
CVE-2026-116252
pgAdmin 4's materialized view refresh passed the target database's name to psql's --dbname argument unchanged
6.5
Moyenne
CVE-2026-116251
pgAdmin 4 did not invalidate a user's existing sessions when their password changed, either through the user's own…
4.2
Moyenne
CVE-2026-116249
In server mode pgAdmin 4 resolves a server's password file, SSL certificate, key, CRL and SSH tunnel identity file…
8.4
Élevée
CVE-2026-116250
In server mode pgAdmin 4 validates a path a user gives for a file in their storage directory with…
6.5
Moyenne