CVE-2023-22298

Description

Open redirect vulnerability in pgAdmin 4 versions prior to v6.14 allows a remote unauthenticated attacker to redirect a user to an arbitrary web site and conduct a phishing attack by having a user to access a specially crafted URL.

Related CPE's

a pgadmin pgadmin *****postgresql **

References

https://github.com/pgadmin-org/pgadmin4

ProductThird Party Advisory

https://github.com/pgadmin-org/pgadmin4/issues/5343

PatchThird Party Advisory

https://jvn.jp/en/jp/JVN03832974/index.html

Third Party Advisory

https://www.pgadmin.org/

Vendor Advisory

FEDORA-2023-0334c6000a

CvssV3 impact

Could not find any metrics

CvssV2 impact

Could not find any metrics

Created by Yello

About Severity.io