PgAdmin Security Update Advisory (CVE-2024-9014)

Overview

 

An update has been released to address vulnerabilities in PgAdmin. Users of the affected versions are advised to update to the latest version.
 

 

Affected Products

 

CVE-2024-9014

  • pgAdmin versions: ~ 8.11 (inclusive)

 

 

Resolved Vulnerabilities

 

Vulnerability that could allow attackers to gain unauthorized access to user data by obtaining client IDs and passwords (CVE-2024-9014)

 

Vulnerability Patches

 

The following product-specific Vulnerability Patches have been made available in the latest update. If you are using an affected version, Please follow the instructions on the Referenced Sites to update to the latest Vulnerability Patches version.

 

CVE-2024-9014

  • pgAdmin version: 8.12

 

 

References
 

[1] CVE-2024-9014 Detail

https://nvd.nist.gov/vuln/detail/CVE-2024-9014

[2] pgAdmin versions 8.11 and earlier are vulnerable to a…

https://github.com/advisories/GHSA-jm9x-rx9x-wpqj

[3] pgadmin-org

https://github.com/orgs/pgadmin-org/repositories