CVE-2023-22298

Open redirect vulnerability in pgAdmin 4 versions prior to v6.14 allows a remote unauthenticated attacker to redirect a user to an arbitrary web site and conduct a phishing attack by having a user to access a specially crafted URL.

• CWE-601
• CWE-601

• https://github.com/pgadmin-org/pgadmin4Product, Third Party Advisory
• https://github.com/pgadmin-org/pgadmin4/issues/5343Patch, Third Party Advisory
• https://jvn.jp/en/jp/JVN03832974/index.htmlThird Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VHY2B25YHIIFQ3G44TR7NNEST7FJGJPH/
• https://www.pgadmin.org/Vendor Advisory
• https://github.com/pgadmin-org/pgadmin4Product, Third Party Advisory
• https://github.com/pgadmin-org/pgadmin4/issues/5343Patch, Third Party Advisory
• https://jvn.jp/en/jp/JVN03832974/index.htmlThird Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VHY2B25YHIIFQ3G44TR7NNEST7FJGJPH/
• https://www.pgadmin.org/Vendor Advisory

Published

Jan 17, 2023

Last Modified

Jun 17, 2026

Status

Modified

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-22292Uncaught exception for some Intel Unison software may allow …7.8
• CVE-2023-22293Improper access control in the Intel(R) Thunderbolt(TM) DCH …8.2
• CVE-2023-22294Privilege escalation in Tribe29 Checkmk Appliance before 1.6…8.8
• CVE-2023-22295Datakit CrossCadWare_x64.dll contains an out of bounds read …5.5
• CVE-2023-22296Reflected cross-site scripting vulnerability in MAHO-PBX Net…6.1
• CVE-2023-22297Access of memory location after end of buffer in some Intel(…7.8
• CVE-2023-22299An OS command injection vulnerability exists in the vtysh_ub…8.8
• CVE-2023-2230Rejected reason: Accidental Assignment
• CVE-2023-22300An unauthenticated remote attacker could force all authentic…6.1
• CVE-2023-22301The kernel subsystem hmdfs within OpenHarmony-v3.1.5 and pri…7.5
• CVE-2023-22302In BIG-IP versions 17.0.x before 17.0.0.2, and 16.1.x beginn…5.9
• CVE-2023-22303TP-Link SG105PE firmware prior to 'TL-SG105PE(UN) 1.0_1.0.0 …9.8