CVE-2025-9636 - CERT CVE
ID CVE-2025-9636
Sažetak pgAdmin <= 9.7 is affected by a Cross-Origin Opener Policy (COOP) vulnerability. This vulnerability allows an attacker to manipulate the OAuth flow, potentially leading to unauthorised account access, account takeover, data breaches, and privilege escalation.
Reference
CVSS
Base: 7.9
Impact: 6.0
Exploitability:1.3
Pristup
VektorSloženostAutentikacija
NETWORK HIGH LOW
Impact
PovjerljivostCjelovitostDostupnost
HIGH HIGH LOW
CVSS vektor CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:L
Zadnje važnije ažuriranje 05-09-2025 - 17:47
Objavljeno 04-09-2025 - 17:15