CVE-2024-9014

CRITICAL

9.9

Description

pgAdmin versions 8.11 and earlier are vulnerable to a security flaw in OAuth2 authentication. This vulnerability allows an attacker to potentially obtain the client ID and secret, leading to unauthorized access to user data.

Details CVE

Score CVSS v3.19.9

SeveriteCRITICAL

Vecteur CVSSCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Vecteur d'attaqueNETWORK

ComplexiteLOW

Privileges requisLOW

Interaction utilisateurNONE

Publie9/23/2024

Derniere modification9/22/2025

Sourcenvd

Observations honeypot0

Produits affectes

pgadmin:pgadmin_4

Faiblesses (CWE)

CWE-522

References

https://github.com/pgadmin-org/pgadmin4/issues/7945(f86ef6dc-4d3a-42ad-8f28-e6d5547a5007)

Correlations IOC

Aucune correlation enregistree

This product uses data from the NVD API but is not endorsed or certified by the NVD.