pgAdmin 4's Import/Export Data tool wraps a user's query export in a psql \copy (...) TO command and checks that the query's parentheses are balanced…
pgAdmin 4's Import/Export Data tool wraps a user's query export in a psql \copy (...) TO command and checks that the query's parentheses are balanced so that nothing can escape the wrapper. The check rejected a backslash inside a single-quoted string, but not inside a double-quoted identifier, where it treated the next double quote as closing the identifier. psql's \copy parser applies the connection's escape character to whichever quote opened a token, so with standard_conforming_strings off a backslash-escaped double quote does not close the identifier. pgAdmin's and psql's view of the quoting then diverged, a closing parenthesis hidden from the check ended the \copy (...) wrapper, and a f
Read at NIST National Vulnerability Database (CVE API 2.0)
- Vendor
- Pgadmin.Org
- Product
- pgAdmin 4
- CVSS v3.1
- 9.9 AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
- Weakness
- CWE-78, CWE-115
- NVD status
- Received
Why it ranks 24 (Routine)
- CVSS v3.1 9.9 critical
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.