CVE-2023-1907
High
Description
A vulnerability was found in pgadmin. Users logging into pgAdmin running in server mode using LDAP authentication may be attached to another user's session if multiple connection attempts occur simultaneously.
SeverityHigh
CVSS8.0
Exploit probability—
ProductPgadmin
PublishedJan 9, 2025
First seenJan 9, 2025
Weakness typeCWE-488CWE-488
How to fix
Update
- pgadmin pgadmin7.0 or later
- pgadmin47.0 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| pgadmin pgadmin | v < 7.0 | 7.0 |
| pgadmin4PyPI | v < 7.0 | 7.0 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.