Description (CNA)
schema_element defeats protective search_path changes; It was found that certain database calls in PostgreSQL could permit an authed attacker with elevated database-level privileges to execute arbitrary code.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / postgresql | affected PostgreSQL 15.3, PostgreSQL 14.8, PostgreSQL 13.11, PostgreSQL 12.15, PostgreSQL 11.20 |
CWE
CWE-20
References
- https://access.redhat.com/security/cve/CVE-2023-2454
- https://www.postgresql.org/support/security/CVE-2023-2454/
- https://security.netapp.com/advisory/ntap-20230706-0006/
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.