Threats tagged 'ghsa-2wvp-3w8r-39fh'

pgAdmin 4 in server mode had a vulnerability where symbolic links, hard links, or FIFOs inside a user's storage directory could be used to bypass path validation checks, allowing unauthorized file read, write, or load operations as the operating system user running pgAdmin. This affected file operations related to server.json export/import and files passed to utilities like pg_dump and psql. Exploitation requires write access to the storage backend as a different OS user and a race condition. The issue was fixed in version 9.19 by securely opening files with O_NOFOLLOW and restricting to regular files with a single link.