CVE-2023-5002

Summary

CVE-2023-5002: A vulnerability was discovered in pgAdmin's server HTTP API. This issue affects versions of pgAdmin prior to 7.6. The flaw allows authenticated users to bypass proper control of the server code executed on the API, enabling them to run arbitrary commands on the server when selecting paths to external PostgreSQL utilities like pg_dump and pg_restore.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.