What’s Vulnerable › Vulnerabilities

CVE-2023-22298

• Severity: medium (CVSS 6.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.9% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-01-17 · updated 2026-06-17
• Weakness: CWE-601

Description

Open redirect vulnerability in pgAdmin 4 versions prior to v6.14 allows a remote unauthenticated attacker to redirect a user to an arbitrary web site and conduct a phishing attack by having a user to access a specially crafted URL.

Affected products

• Fedoraproject Fedora: 36
• pgadmin.org pgAdmin 4: from 4.0 before 6.14 — fixed in 6.14

How to fix

Upgrade to a fixed version: pgadmin.org pgAdmin 4 6.14. Check the vendor advisory for mitigations.

References

• https://github.com/pgadmin-org/pgadmin4
• https://github.com/pgadmin-org/pgadmin4/issues/5343
• https://jvn.jp/en/jp/JVN03832974/index.html
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VHY2B25YHIIFQ3G44TR7NNEST7FJGJPH/
• https://www.pgadmin.org/
• https://github.com/pgadmin-org/pgadmin4
• https://github.com/pgadmin-org/pgadmin4/issues/5343
• https://jvn.jp/en/jp/JVN03832974/index.html
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VHY2B25YHIIFQ3G44TR7NNEST7FJGJPH/
• https://www.pgadmin.org/

Get alerted when CVE-2023-22298 or the next vulnerability affects your stack