Threats tagged 'ghsa-wp8g-m28w-27c5'

pgAdmin 4 in server mode has a path validation flaw in its check_access_permission() function, leading to discrepancies between checked and used file paths. This allows users to potentially access, read, delete, or rename files outside their designated storage directories, including other users' files, by exploiting path handling inconsistencies. The issue affects versions before 9.19 and does not impact desktop mode.