CVE-2024-3116: Remote Code Execution Vulnerability through the validate binary path API in pgAdmin 4
pgAdmin <= 8.4 is affected by a Remote Code Execution (RCE) vulnerability through the validate binary path API. This vulnerability allows attackers to execute arbitrary code on the server hosting PGAdmin, posing a severe risk to the database management system's integrity and the security of the underlying data.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
pip/pgadmin4to a version that resolves this vulnerability.Fixed in 8.5
Event History
Frequently Asked Questions
What is the severity of CVE-2024-3116?
CVE-2024-3116 has a severe risk level as it allows remote code execution on affected servers.
How do I fix CVE-2024-3116?
To mitigate CVE-2024-3116, update pgAdmin to version 8.5 or later.
Which versions are affected by CVE-2024-3116?
CVE-2024-3116 affects pgAdmin versions up to and including 8.4.
What type of vulnerability is CVE-2024-3116?
CVE-2024-3116 is a remote code execution (RCE) vulnerability.
How can attackers exploit CVE-2024-3116?
Attackers can exploit CVE-2024-3116 through the validate binary path API to execute arbitrary code.