CVE-2024-9014 — OAuth2 client id and secret exposed through the web browser in pgAdmin 4
pgAdmin versions 8.11 and earlier are vulnerable to a security flaw in OAuth2 authentication. This vulnerability allows an attacker to potentially obtain the client ID and secre…
Published: 2024-09-23 · CVSS: 9.9 · CVSS 3.1
pgAdmin versions 8.11 and earlier are vulnerable to a security flaw in OAuth2 authentication. This vulnerability allows an attacker to potentially obtain the client ID and secret, leading to unauthorized access to user data.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7