Lucene search
GoogleOSV:CVE-2022-0959HistoryMar 16, 2022 - 3:15 p.m.
CVE-2022-0959
2022-03-1615:15:16
Google
osv.dev
8
malicious user
http request
csrf token
session cookie
file upload
pgadmin
EPSS
0.001
Percentile
26.9%
A malicious, but authorised and authenticated user can construct an HTTP request using their existing CSRF token and session cookie to manually upload files to any location that the operating system user account under which pgAdmin is running has permission to write.
Related
nessus
nessus
SUSE SLES15 Security Update : pgadmin4 (SUSE-SU-2022:1541-1)
2022-05-05 00:00:00
suse
suse
Security update for pgadmin4 (important)
2022-05-04 00:00:00
openvas
openvas
Mageia: Security Advisory (MGASA-2022-0257)
2022-07-14 00:00:00
SUSE: Security Advisory (SUSE-SU-2022:1541-1)
2022-05-05 00:00:00
openSUSE: Security Advisory for pgadmin4 (SUSE-SU-2022:1541-1)
2022-05-17 00:00:00
redhatcve
redhatcve
CVE-2022-0959
2022-05-20 22:37:42
mageia
mageia
Updated pgadmin4 packages fix security vulnerability
2022-07-13 23:44:07
nvd
nvd
CVE-2022-0959
2022-03-16 15:15:16
cvelist
cvelist
CVE-2022-0959
2022-03-16 14:03:38
cve
cve
CVE-2022-0959
2022-03-16 15:15:16
veracode
veracode
Path Traversal
2024-04-16 09:18:01
osv
osv
pgAdmin 4 Path Traversal vulnerability
2022-03-17 00:00:24
pgadmin4-8.2-1.1 on GA media
2024-06-15 00:00:00
prion
prion
Cross site request forgery (csrf)
2022-03-16 15:15:00
github
github
pgAdmin 4 Path Traversal vulnerability
2022-03-17 00:00:24