Assigner | PostgreSQL |
Reserved | 2024-04-25 |
Published | 2024-05-02 |
Updated | 2024-06-06 |
Description
pgAdmin <= 8.5 is affected by XSS vulnerability in /settings/store API response json payload. This vulnerability allows attackers to execute malicious script at the client end.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L |
Product status
Any version before 8.6
References
https://github.com/pgadmin-org/pgadmin4/issues/7282