Staging Environment: Content and features may be unstable or change without notice.

Advisory Severity Curation

CVE-2024-9014

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-jm9x-rx9x-wpqj

OAuth2 client ID and secret exposed through the web browser pgAdmin versions 8.11 and earlier are vulnerable to a security flaw in OAuth2 authentication. This vulnerability allows an attacker to potentially obtain the client ID and secret, leading to unauthorized access to user data.

gitlab/pypi/pgadmin4/CVE-2024-9014

OAuth2 client ID and secret exposed through the web browser pgAdmin versions 8.11 and earlier are vulnerable to a security flaw in OAuth2 authentication. This vulnerability allows an attacker to potentially obtain the client ID and secret, leading to unauthorized access to user data.

pypa/pgadmin4/PYSEC-2026-1775

OAuth2 client ID and secret exposed through the web browser pgAdmin versions 8.11 and earlier are vulnerable to a security flaw in OAuth2 authentication. This vulnerability allows an attacker to potentially obtain the client ID and secret, leading to unauthorized access to user data.

pysec/PYSEC-2026-1775

OAuth2 client ID and secret exposed through the web browser pgAdmin versions 8.11 and earlier are vulnerable to a security flaw in OAuth2 authentication. This vulnerability allows an attacker to potentially obtain the client ID and secret, leading to unauthorized access to user data.