Vulnerability Details CVE-2023-22298
Open redirect vulnerability in pgAdmin 4 versions prior to v6.14 allows a remote unauthenticated attacker to redirect a user to an arbitrary web site and conduct a phishing attack by having a user to access a specially crafted URL.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.005
EPSS Ranking 63.7%
CVSS Severity
CVSS v3 Score 6.1
References
- https://github.com/pgadmin-org/pgadmin4
- https://github.com/pgadmin-org/pgadmin4/issues/5343
- https://jvn.jp/en/jp/JVN03832974/index.html
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VHY2B25YHIIFQ3G44TR7NNEST7FJGJPH/
- https://www.pgadmin.org/
- https://github.com/pgadmin-org/pgadmin4
- https://github.com/pgadmin-org/pgadmin4/issues/5343
- https://jvn.jp/en/jp/JVN03832974/index.html
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VHY2B25YHIIFQ3G44TR7NNEST7FJGJPH/
- https://www.pgadmin.org/
Products affected by CVE-2023-22298
-
cpe:2.3:a:pgadmin:pgadmin_4:4.0
-
cpe:2.3:a:pgadmin:pgadmin_4:4.1
-
cpe:2.3:a:pgadmin:pgadmin_4:4.10
-
cpe:2.3:a:pgadmin:pgadmin_4:4.11
-
cpe:2.3:a:pgadmin:pgadmin_4:4.12
-
cpe:2.3:a:pgadmin:pgadmin_4:4.13
-
cpe:2.3:a:pgadmin:pgadmin_4:4.14
-
cpe:2.3:a:pgadmin:pgadmin_4:4.15
-
cpe:2.3:a:pgadmin:pgadmin_4:4.16
-
cpe:2.3:a:pgadmin:pgadmin_4:4.17
-
cpe:2.3:a:pgadmin:pgadmin_4:4.18
-
cpe:2.3:a:pgadmin:pgadmin_4:4.19
-
cpe:2.3:a:pgadmin:pgadmin_4:4.2
-
cpe:2.3:a:pgadmin:pgadmin_4:4.20
-
cpe:2.3:a:pgadmin:pgadmin_4:4.21
-
cpe:2.3:a:pgadmin:pgadmin_4:4.22
-
cpe:2.3:a:pgadmin:pgadmin_4:4.23
-
cpe:2.3:a:pgadmin:pgadmin_4:4.24
-
cpe:2.3:a:pgadmin:pgadmin_4:4.25
-
cpe:2.3:a:pgadmin:pgadmin_4:4.26
-
cpe:2.3:a:pgadmin:pgadmin_4:4.27
-
cpe:2.3:a:pgadmin:pgadmin_4:4.28
-
cpe:2.3:a:pgadmin:pgadmin_4:4.29
-
cpe:2.3:a:pgadmin:pgadmin_4:4.3
-
cpe:2.3:a:pgadmin:pgadmin_4:4.30
-
cpe:2.3:a:pgadmin:pgadmin_4:4.4
-
cpe:2.3:a:pgadmin:pgadmin_4:4.5
-
cpe:2.3:a:pgadmin:pgadmin_4:4.6
-
cpe:2.3:a:pgadmin:pgadmin_4:4.7
-
cpe:2.3:a:pgadmin:pgadmin_4:4.8
-
cpe:2.3:a:pgadmin:pgadmin_4:4.9
-
cpe:2.3:a:pgadmin:pgadmin_4:5.0
-
cpe:2.3:a:pgadmin:pgadmin_4:5.1
-
cpe:2.3:a:pgadmin:pgadmin_4:5.2
-
cpe:2.3:a:pgadmin:pgadmin_4:5.3
-
cpe:2.3:a:pgadmin:pgadmin_4:5.4
-
cpe:2.3:a:pgadmin:pgadmin_4:5.5
-
cpe:2.3:a:pgadmin:pgadmin_4:5.6
-
cpe:2.3:a:pgadmin:pgadmin_4:5.7
-
cpe:2.3:a:pgadmin:pgadmin_4:6.0
-
cpe:2.3:a:pgadmin:pgadmin_4:6.1
-
cpe:2.3:a:pgadmin:pgadmin_4:6.10
-
cpe:2.3:a:pgadmin:pgadmin_4:6.11
-
cpe:2.3:a:pgadmin:pgadmin_4:6.12
-
cpe:2.3:a:pgadmin:pgadmin_4:6.13
-
cpe:2.3:a:pgadmin:pgadmin_4:6.2
-
cpe:2.3:a:pgadmin:pgadmin_4:6.3
-
cpe:2.3:a:pgadmin:pgadmin_4:6.4
-
cpe:2.3:a:pgadmin:pgadmin_4:6.5
-
cpe:2.3:a:pgadmin:pgadmin_4:6.6
-
cpe:2.3:a:pgadmin:pgadmin_4:6.7
-
cpe:2.3:a:pgadmin:pgadmin_4:6.8
-
cpe:2.3:a:pgadmin:pgadmin_4:6.9
-
cpe:2.3:o:fedoraproject:fedora:36