CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-5002

A flaw was found in pgAdmin. This issue occurs when the pgAdmin server HTTP API validates the path a user selects to external PostgreSQL utilities such as pg_dump and pg_restore. Versions of pgAdmin prior to 7.6 failed to properly control the server code executed on this API, allowing an authenticated user to run arbitrary commands on the server.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.173

EPSS Ranking 94.7%

CVSS Severity

CVSS v3 Score 6.0

References

Products affected by CVE-2023-5002

Pgadmin » Pgadmin 4 » Version: N/A

cpe:2.3:a:pgadmin:pgadmin_4:-
Pgadmin » Pgadmin 4 » Version: 1.0

cpe:2.3:a:pgadmin:pgadmin_4:1.0
Pgadmin » Pgadmin 4 » Version: 1.1

cpe:2.3:a:pgadmin:pgadmin_4:1.1
Pgadmin » Pgadmin 4 » Version: 1.2

cpe:2.3:a:pgadmin:pgadmin_4:1.2
Pgadmin » Pgadmin 4 » Version: 1.3

cpe:2.3:a:pgadmin:pgadmin_4:1.3
Pgadmin » Pgadmin 4 » Version: 1.4

cpe:2.3:a:pgadmin:pgadmin_4:1.4
Pgadmin » Pgadmin 4 » Version: 1.5

cpe:2.3:a:pgadmin:pgadmin_4:1.5
Pgadmin » Pgadmin 4 » Version: 1.6

cpe:2.3:a:pgadmin:pgadmin_4:1.6
Pgadmin » Pgadmin 4 » Version: 2.0

cpe:2.3:a:pgadmin:pgadmin_4:2.0
Pgadmin » Pgadmin 4 » Version: 2.1

cpe:2.3:a:pgadmin:pgadmin_4:2.1
Pgadmin » Pgadmin 4 » Version: 3.0

cpe:2.3:a:pgadmin:pgadmin_4:3.0
Pgadmin » Pgadmin 4 » Version: 3.1

cpe:2.3:a:pgadmin:pgadmin_4:3.1
Pgadmin » Pgadmin 4 » Version: 3.2

cpe:2.3:a:pgadmin:pgadmin_4:3.2
Pgadmin » Pgadmin 4 » Version: 3.3

cpe:2.3:a:pgadmin:pgadmin_4:3.3
Pgadmin » Pgadmin 4 » Version: 3.4

cpe:2.3:a:pgadmin:pgadmin_4:3.4
Pgadmin » Pgadmin 4 » Version: 3.5

cpe:2.3:a:pgadmin:pgadmin_4:3.5
Pgadmin » Pgadmin 4 » Version: 3.6

cpe:2.3:a:pgadmin:pgadmin_4:3.6
Pgadmin » Pgadmin 4 » Version: 4.0

cpe:2.3:a:pgadmin:pgadmin_4:4.0
Pgadmin » Pgadmin 4 » Version: 4.1

cpe:2.3:a:pgadmin:pgadmin_4:4.1
Pgadmin » Pgadmin 4 » Version: 4.10

cpe:2.3:a:pgadmin:pgadmin_4:4.10
Pgadmin » Pgadmin 4 » Version: 4.11

cpe:2.3:a:pgadmin:pgadmin_4:4.11
Pgadmin » Pgadmin 4 » Version: 4.12

cpe:2.3:a:pgadmin:pgadmin_4:4.12
Pgadmin » Pgadmin 4 » Version: 4.13

cpe:2.3:a:pgadmin:pgadmin_4:4.13
Pgadmin » Pgadmin 4 » Version: 4.14

cpe:2.3:a:pgadmin:pgadmin_4:4.14
Pgadmin » Pgadmin 4 » Version: 4.15

cpe:2.3:a:pgadmin:pgadmin_4:4.15
Pgadmin » Pgadmin 4 » Version: 4.16

cpe:2.3:a:pgadmin:pgadmin_4:4.16
Pgadmin » Pgadmin 4 » Version: 4.17

cpe:2.3:a:pgadmin:pgadmin_4:4.17
Pgadmin » Pgadmin 4 » Version: 4.18

cpe:2.3:a:pgadmin:pgadmin_4:4.18
Pgadmin » Pgadmin 4 » Version: 4.19

cpe:2.3:a:pgadmin:pgadmin_4:4.19
Pgadmin » Pgadmin 4 » Version: 4.2

cpe:2.3:a:pgadmin:pgadmin_4:4.2
Pgadmin » Pgadmin 4 » Version: 4.20

cpe:2.3:a:pgadmin:pgadmin_4:4.20
Pgadmin » Pgadmin 4 » Version: 4.21

cpe:2.3:a:pgadmin:pgadmin_4:4.21
Pgadmin » Pgadmin 4 » Version: 4.22

cpe:2.3:a:pgadmin:pgadmin_4:4.22
Pgadmin » Pgadmin 4 » Version: 4.23

cpe:2.3:a:pgadmin:pgadmin_4:4.23
Pgadmin » Pgadmin 4 » Version: 4.24

cpe:2.3:a:pgadmin:pgadmin_4:4.24
Pgadmin » Pgadmin 4 » Version: 4.25

cpe:2.3:a:pgadmin:pgadmin_4:4.25
Pgadmin » Pgadmin 4 » Version: 4.26

cpe:2.3:a:pgadmin:pgadmin_4:4.26
Pgadmin » Pgadmin 4 » Version: 4.27

cpe:2.3:a:pgadmin:pgadmin_4:4.27
Pgadmin » Pgadmin 4 » Version: 4.28

cpe:2.3:a:pgadmin:pgadmin_4:4.28
Pgadmin » Pgadmin 4 » Version: 4.29

cpe:2.3:a:pgadmin:pgadmin_4:4.29
Pgadmin » Pgadmin 4 » Version: 4.3

cpe:2.3:a:pgadmin:pgadmin_4:4.3
Pgadmin » Pgadmin 4 » Version: 4.30

cpe:2.3:a:pgadmin:pgadmin_4:4.30
Pgadmin » Pgadmin 4 » Version: 4.4

cpe:2.3:a:pgadmin:pgadmin_4:4.4
Pgadmin » Pgadmin 4 » Version: 4.5

cpe:2.3:a:pgadmin:pgadmin_4:4.5
Pgadmin » Pgadmin 4 » Version: 4.6

cpe:2.3:a:pgadmin:pgadmin_4:4.6
Pgadmin » Pgadmin 4 » Version: 4.7

cpe:2.3:a:pgadmin:pgadmin_4:4.7
Pgadmin » Pgadmin 4 » Version: 4.8

cpe:2.3:a:pgadmin:pgadmin_4:4.8
Pgadmin » Pgadmin 4 » Version: 4.9

cpe:2.3:a:pgadmin:pgadmin_4:4.9
Pgadmin » Pgadmin 4 » Version: 5.0

cpe:2.3:a:pgadmin:pgadmin_4:5.0
Pgadmin » Pgadmin 4 » Version: 5.1

cpe:2.3:a:pgadmin:pgadmin_4:5.1
Pgadmin » Pgadmin 4 » Version: 5.2

cpe:2.3:a:pgadmin:pgadmin_4:5.2
Pgadmin » Pgadmin 4 » Version: 5.3

cpe:2.3:a:pgadmin:pgadmin_4:5.3
Pgadmin » Pgadmin 4 » Version: 5.4

cpe:2.3:a:pgadmin:pgadmin_4:5.4
Pgadmin » Pgadmin 4 » Version: 5.5

cpe:2.3:a:pgadmin:pgadmin_4:5.5
Pgadmin » Pgadmin 4 » Version: 5.6

cpe:2.3:a:pgadmin:pgadmin_4:5.6
Pgadmin » Pgadmin 4 » Version: 5.7

cpe:2.3:a:pgadmin:pgadmin_4:5.7
Pgadmin » Pgadmin 4 » Version: 6.0

cpe:2.3:a:pgadmin:pgadmin_4:6.0
Pgadmin » Pgadmin 4 » Version: 6.1

cpe:2.3:a:pgadmin:pgadmin_4:6.1
Pgadmin » Pgadmin 4 » Version: 6.10

cpe:2.3:a:pgadmin:pgadmin_4:6.10
Pgadmin » Pgadmin 4 » Version: 6.11

cpe:2.3:a:pgadmin:pgadmin_4:6.11
Pgadmin » Pgadmin 4 » Version: 6.12

cpe:2.3:a:pgadmin:pgadmin_4:6.12
Pgadmin » Pgadmin 4 » Version: 6.13

cpe:2.3:a:pgadmin:pgadmin_4:6.13
Pgadmin » Pgadmin 4 » Version: 6.14

cpe:2.3:a:pgadmin:pgadmin_4:6.14
Pgadmin » Pgadmin 4 » Version: 6.15

cpe:2.3:a:pgadmin:pgadmin_4:6.15
Pgadmin » Pgadmin 4 » Version: 6.16

cpe:2.3:a:pgadmin:pgadmin_4:6.16
Pgadmin » Pgadmin 4 » Version: 6.17

cpe:2.3:a:pgadmin:pgadmin_4:6.17
Pgadmin » Pgadmin 4 » Version: 6.18

cpe:2.3:a:pgadmin:pgadmin_4:6.18
Pgadmin » Pgadmin 4 » Version: 6.19

cpe:2.3:a:pgadmin:pgadmin_4:6.19
Pgadmin » Pgadmin 4 » Version: 6.2

cpe:2.3:a:pgadmin:pgadmin_4:6.2
Pgadmin » Pgadmin 4 » Version: 6.20

cpe:2.3:a:pgadmin:pgadmin_4:6.20
Pgadmin » Pgadmin 4 » Version: 6.21

cpe:2.3:a:pgadmin:pgadmin_4:6.21
Pgadmin » Pgadmin 4 » Version: 6.3

cpe:2.3:a:pgadmin:pgadmin_4:6.3
Pgadmin » Pgadmin 4 » Version: 6.4

cpe:2.3:a:pgadmin:pgadmin_4:6.4
Pgadmin » Pgadmin 4 » Version: 6.5

cpe:2.3:a:pgadmin:pgadmin_4:6.5
Pgadmin » Pgadmin 4 » Version: 6.6

cpe:2.3:a:pgadmin:pgadmin_4:6.6
Pgadmin » Pgadmin 4 » Version: 6.7

cpe:2.3:a:pgadmin:pgadmin_4:6.7
Pgadmin » Pgadmin 4 » Version: 6.8

cpe:2.3:a:pgadmin:pgadmin_4:6.8
Pgadmin » Pgadmin 4 » Version: 6.9

cpe:2.3:a:pgadmin:pgadmin_4:6.9
Pgadmin » Pgadmin 4 » Version: 7.0

cpe:2.3:a:pgadmin:pgadmin_4:7.0
Pgadmin » Pgadmin 4 » Version: 7.1

cpe:2.3:a:pgadmin:pgadmin_4:7.1
Pgadmin » Pgadmin 4 » Version: 7.2

cpe:2.3:a:pgadmin:pgadmin_4:7.2
Pgadmin » Pgadmin 4 » Version: 7.3

cpe:2.3:a:pgadmin:pgadmin_4:7.3
Pgadmin » Pgadmin 4 » Version: 7.4

cpe:2.3:a:pgadmin:pgadmin_4:7.4
Pgadmin » Pgadmin 4 » Version: 7.5

cpe:2.3:a:pgadmin:pgadmin_4:7.5
Pgadmin » Pgadmin 4 » Version: 7.6

cpe:2.3:a:pgadmin:pgadmin_4:7.6
Fedoraproject » Fedora » Version: 37

cpe:2.3:o:fedoraproject:fedora:37
Fedoraproject » Fedora » Version: 38

cpe:2.3:o:fedoraproject:fedora:38

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-5002

Products

Pricing

Contact Us