PyPI/pgadmin4 CVE-2024-4215: high 7.4, EPSS 0.63%
pgAdmin is affected by a multi-factor authentication bypass vulnerability
Action: Upgrade pgadmin4 to 8.6 or later.
pip install pgadmin4==8.6Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 8.6 | - |
Fixed versions
| 8.6 |
Sources
- osv: GHSA-2mvc-557g-5638
- https://nvd.nist.gov/vuln/detail/CVE-2024-4215
- https://github.com/pgadmin-org/pgadmin4/issues/7425
- https://github.com/pgadmin-org/pgadmin4/commit/f4761f55f7cf6d56d6c5129f921393b0b47fd976
- https://github.com/pgadmin-org/pgadmin4
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/T2YFVCB4HCXU3FQBZ5XTWJZWSZUDNCXE
CVE-2024-4215 · published · modified · JSON