CVE-2022-0959 Vulnerability Details

  /     /     /  

CVE-2022-0959 Metadata Quick Info

CVE Published: 16/03/2022 | CVE Updated: 02/08/2024 | CVE Year: 2022
Source: redhat | Vendor: n/a | Product: pgadmin
Status : PUBLISHED

---

CVE-2022-0959 Description

A malicious, but authorised and authenticated user can construct an HTTP request using their existing CSRF token and session cookie to manually upload files to any location that the operating system user account under which pgAdmin is running has permission to write.

Metrics

CVSS Version: 3.1 | Base Score: n/a
Vector: n/a

l➤ Exploitability Metrics:
    Attack Vector (AV)*
    Attack Complexity (AC)*
    Privileges Required (PR)*
    User Interaction (UI)*
    Scope (S)*

l➤ Impact Metrics:
    Confidentiality Impact (C)*
    Integrity Impact (I)*
    Availability Impact (A)*

Weakness Enumeration (CWE)

CWE-ID: CWE-434
CWE Name: CWE-434
Source: n/a

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID:
CAPEC Description:


Source: NVD (National Vulnerability Database).