BIT-postgresql-2023-2454

vendorUSosv

view advisory published 2024-03-06Licence: per source

schema_element defeats protective search_path changes; It was found that certain database calls in PostgreSQL could permit an authed attacker with elevated database-level privileges to execute arbitrary code.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2023-2454US	high7.2OT elevated	1.20% (68th)	—	2023-06-09
schema_element defeats protective search_path changes; It was found that certain database calls in PostgreSQL could permit an authed attacker with elevated database-level privilege…

references

External citations — patches, advisories, analysis.

https://access.redhat.com/security/cve/CVE-2023-2454ADVISORY
https://nvd.nist.gov/vuln/detail/CVE-2023-2454WEB
https://security.netapp.com/advisory/ntap-20230706-0006/WEB
https://www.postgresql.org/support/security/CVE-2023-2454/ADVISORY

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan