CVE-2022-0959CWE-434

A malicious, but authorised and authenticated user can construct an HTTP request using their existing CSRF token and session cookie to manually upload files to…

published March 16, 2022

CVSS
—
EPSS
1%
Percentile
61.5
In the wild
Unconfirmed
What it is

A malicious, but authorised and authenticated user can construct an HTTP request using their existing CSRF token and session cookie to manually upload files to any location that the operating system user account under which pgAdmin is running has permission to write.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00968 · 61.5th percentile
Weakness
CWE-434 · Unrestricted Upload of File with Dangerous Type
Published
2022-03-16T14:03Z
EPSS history
Timeline
  • 16 MAR 14:03Z
    A malicious, but authorised and authenticated user can construct an HTTP request using their existing CSRF token and session cookie to manually upload files to…
    cvelistv5