Vulnerabilities > Postgresql > Pgadmin 4 > Medium

DATE CVE VULNERABILITY TITLE RISK
2023-03-27 CVE-2023-0241 Path Traversal vulnerability in Postgresql Pgadmin 4
pgAdmin 4 versions prior to v6.19 contains a directory traversal vulnerability.
network
low complexity
postgresql CWE-22
6.5
6.5
2022-03-16 CVE-2022-0959 Unrestricted Upload of File with Dangerous Type vulnerability in Postgresql Pgadmin 4
A malicious, but authorised and authenticated user can construct an HTTP request using their existing CSRF token and session cookie to manually upload files to any location that the operating system user account under which pgAdmin is running has permission to write.
network
low complexity
postgresql CWE-434
6.5
6.5