Windows apps · Application version · March 8, 2023
pgAdmin 4 6.21
pgAdmin 4 6.21, released March 8, 2023, fixes 4 CVEs in pgAdmin 4 (version 6.21). None of them is reported as exploited. Patch Radar priority: High.
High
CVEs closed
4
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.8007
99th percentile
Priority of the 4 CVEs
Patch now 0
Urgent 0
High 1
Routine 3
Applies to
| Product | Version |
|---|---|
| pgAdmin 4 | 6.21 |
CVEs this fix closes
| Priority | CVE | Title | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| High | CVE-2022-4223 | pgAdmin and 1 other: The pgAdmin server includes an HTTP API that is intended to be used to validate the path a user selects… | 8.8 | 0.8007 | None reported | |
| Routine | CVE-2023-0241 | pgAdmin and 1 other: pgAdmin 4 versions prior to v6.19 contains a directory traversal vulnerability. | 6.5 | 0.0883 | None reported | |
| Routine | CVE-2022-0959 | pgAdmin and 1 other: A malicious, but authorised and authenticated user can construct an HTTP request using their existing… | 6.5 | 0.0097 | None reported | |
| Routine | CVE-2023-22298 | pgAdmin and 1 other: URL Redirection to Untrusted Site ('Open Redirect') | 6.1 | 0.0096 | None reported |
Showing 1 to 4 of 4
1