All vulnerabilities

Servers and applications

CVE-2024-9014

pgAdmin versions 8.11 and earlier are vulnerable to a security flaw in OAuth2 authentication. This vulnerability allows an attacker to potentially obtain the client ID and secret, leading to unauthorized access to user data.

Severity
Medium 6.5
Published
23 Sept 2024
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Fixed in
8.12
Sources
NVD

Affected software

SoftwareAffected versions
pgAdminServers and applications · cpe:a:pgadmin:pgadmin_4
  • Every version before 8.12

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2024-9014
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2024-9014