Description
It was found that some PostgreSQL extensions did not use search_path safely in their installation script. An attacker with sufficient privileges could use this flaw to trick an administrator into executing a specially crafted script, during the installation or update of such extension. This affects PostgreSQL versions before 12.4, before 11.9, before 10.14, before 9.6.19, and before 9.5.23.
Details
Affected Packages
| Software | From version | Fixed in |
|---|---|---|
| postgresql | — | — |
References
Similar Threats
- Unknown ALPINE-CVE-2023-39417
- Unknown ALPINE-CVE-2023-39418
- Unknown ALPINE-CVE-2023-2454
- Unknown ALPINE-CVE-2023-2455
- Unknown ALPINE-CVE-2022-41862
Patch Gap Protection
Running software with known vulnerabilities?
BotEraser can help reduce exposure by blocking IPs associated with exploit activity — even before a patch is available.
Start Free →No credit card required · Results in minutes
ⓘ Data Notice: The information presented above has been compiled from publicly available internet sources. Boteraser aggregates this data solely for informational purposes and does not independently classify, evaluate, or endorse any findings about the vulnerabilities listed. The accuracy and completeness of this information is the sole responsibility of the original publishers. Boteraser and its operators accept no liability for any decisions made based on this data.