pgAdmin 4 remote code execution vulnerability

pgAdmin 4 is a reliable and comprehensive database design and management software for PostgreSQL. pgAdmin 4 suffers from a remote code execution vulnerability, which is required in the Windows environment, and due to the developer’s lax permission checks, an attacker could exploit the vulnerability by constructing a request to make pgAdmin access a malicious UNC address to execute arbitrary commands.