CVE-2023-0241: pgAdmin 4 vulnerable to directory traversal

March 27, 2023 (updated March 17, 2025)

pgAdmin 4 versions prior to v6.19 contains a directory traversal vulnerability. A user of the product may change another user’s settings or alter the database.

References

github.com/advisories/GHSA-9crj-hpxh-f6qg
github.com/akshay-joshi/pgadmin4/commit/64d7289c5b3831137b17bb4c5022ef4f63d2ef42
github.com/pgadmin-org
github.com/pgadmin-org/pgadmin4/issues/5734
jvn.jp/en/jp/JVN01398015
nvd.nist.gov/vuln/detail/CVE-2023-0241

Code Behaviors & Features

Detect and mitigate CVE-2023-0241 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →