writeups.xyz / Pre-Auth RCE with CodeQL in Under 20 Minutes

Submitter : c2a

Date: 2 December 2022

Bounty : undisclosed

Vulnerabilities :

• Security Code Review
• RCE
• Command Injection
• Broken Authorization

Programs :

• PgAdmin

Authors :

• Florian Hauser (@Frycos)

Link :
https://frycos.github.io/vulns4free/2022/12/02/rce-in-20-minutes.html