GHSA-cr8c-972v-rmp3

    Dashboard / Vulnerabilities / GHSA-cr8c-972v-rmp3

    GHSA-cr8c-972v-rmp3

    Published: 17 Mar 2022Last Modified: 6 Jul 2026

    Summary: pgAdmin 4 Path Traversal vulnerability

    Details: When run in server mode, pgAdmin 4 allows users to store files on the server under individual storage directories. Files such as SQL scripts may be uploaded through the user interface. The URI to which upload requests are made fails to validate the upload path to prevent path traversal techniques being used to store files outside of the storage directory. A malicious, but authorised and authenticated user can construct an HTTP request using their existing CSRF token and session cookie to manually upload files to any location that the operating system user account under which pgAdmin is running has permission to write.

    References: https://nvd.nist.gov/vuln/detail/CVE-2022-0959, https://github.com/pgadmin-org/pgadmin4/commit/dccd4f0bbaafa783d9f0360c7592b128d5cc3928, https://bugzilla.redhat.com/show_bug.cgi?id=2063759, https://github.com/pgadmin-org/pgadmin4

    Affected packages

    Package

    Name: pgadmin4

    Purl: pkg:pypi/pgadmin4

    Affected ranges

    Type: ECOSYSTEM

    Events:

    Introduced- 0
    Fixed -6.7

    Affected versions

    4.20

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    GHSA-cr8c-972v-rmp3 | CVE-DB