pgadmin.org pgAdmin 4

• CVE-2024-9014 Critical 9.9 OAuth2 client id and secret exposed through the web browser in pgAdmin 4 9.7%
• CVE-2024-6238 High 7.4 pgAdmin 4 Installation Directory permission issue 0.2%
• CVE-2024-4216 High 7.4 XSS vulnerability in /settings/store API response json payload in pgAdmin 4 0.5%
• CVE-2024-4215 High 7.4 The Multi Factor Authentication bypass vulnerability in pgAdmin 4 0.6%
• CVE-2024-3116 High 7.4 Remote Code Execution Vulnerability through the validate binary path API in pgAdmin 4 65.8%
• CVE-2024-2044 Critical 9.9 Unsafe Deserialisation and Remote Code Execution by an Authenticated user in pgAdmin 4 79.5%