← Database

CVE-2024-9014

CRITICAL CVSS: 9.9 Published: 2024-09-23 Modified: 2026-06-17

Description

pgAdmin versions 8.11 and earlier are vulnerable to a security flaw in OAuth2 authentication. This vulnerability allows an attacker to potentially obtain the client ID and secret, leading to unauthorized access to user data.

Affected Platforms

Pgadmin Pgadmin 4

Weakness Type

CWE-522

References