Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
veracodeVeracode Vulnerability DatabaseVERACODE:46758
HistoryMay 06, 2024 - 7:00 a.m.

Cross-Site Scripting (XSS)

2024-05-0607:00:32
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5
pgadmin
xss
vulnerability
json
input sanitization
client-side

7.4 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L

6.1 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.0%

JSON

pgAdmin is vulnerable to a Cross-site Scripting (XSS) in the JSON payload of the /settings/store API response. The vulnerability arises due to inadequate input sanitization, enabling attackers to inject and execute malicious scripts on the client’s side.

CPENameOperatorVersion
pgadmin4le8.5
pgadmin4le8.5

Related

osv 1
cve 1
nvd 1
cvelist 1
vulnrichment 1
github 1
fedora 2
nessus 2
openvas 2
osv
osv
pgAdmin Cross-site Scripting vulnerability in /settings/store API response json payload
2024-05-02 18:30:55
cve
cve
CVE-2024-4216
2024-05-02 18:15:07
nvd
nvd
CVE-2024-4216
2024-05-02 18:15:07
cvelist
cvelist
CVE-2024-4216 XSS vulnerability in /settings/store API response json payload in pgAdmin 4
2024-05-02 17:42:59
vulnrichment
vulnrichment
CVE-2024-4216 XSS vulnerability in /settings/store API response json payload in pgAdmin 4
2024-05-02 17:42:59
github
github
pgAdmin Cross-site Scripting vulnerability in /settings/store API response json payload
2024-05-02 18:30:55
fedora
fedora
[SECURITY] Fedora 40 Update: pgadmin4-8.6-1.fc40
2024-05-23 01:09:17
[SECURITY] Fedora 40 Update: python-libgravatar-1.0.4-1.fc40
2024-05-23 01:09:17
nessus
nessus
SUSE SLED15 / SLES15 / openSUSE 15 Security Update : pgadmin4 (SUSE-SU-2024:2260-1)
2024-07-03 00:00:00
Fedora 40 : pgadmin4 / python-libgravatar (2024-4d4ceb61f7)
2024-05-23 00:00:00
openvas
openvas
Fedora: Security Advisory for pgadmin4 (FEDORA-2024-4d4ceb61f7)
2024-05-27 00:00:00
Fedora: Security Advisory for python-libgravatar (FEDORA-2024-4d4ceb61f7)
2024-05-27 00:00:00

7.4 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L

6.1 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.0%

JSON
Related for VERACODE:46758
osv1cve1nvd1cvelist1vulnrichment1github1fedora2nessus2openvas2