~ / search / GHSA-2mvc-557g-5638

GHSA-2mvc-557g-5638

pgAdmin is affected by a multi-factor authentication bypass vulnerability

Source: GitHub Advisory Database (reviewed) Moderate CVE-2024-4215

Packages

EcosystemPackageAffectedFixed in
PyPI pgadmin4 < 8.6 8.6

Details

As written in the advisory (Markdown source, shown as plain text).

pgAdmin <= 8.5 is affected by a multi-factor authentication bypass vulnerability. This vulnerability allows an attacker with knowledge of a legitimate account’s username and password may authenticate to the application and perform sensitive actions within the application, such as managing files and executing SQL queries, regardless of the account’s MFA enrollment status.

References

External links from the advisory. They lead to third-party sites.