CVE-2023-2454
Description
schema_element defeats protective search_path changes; It was found that certain database calls in PostgreSQL could permit an authed attacker with elevated database-level privileges to execute arbitrary code.
CWE
- CWE-20 — CWE-20
Affected
- n/a / postgresql — v=PostgreSQL 15.3, PostgreSQL 14.8, PostgreSQL 13.11, PostgreSQL 12.15, PostgreSQL 11.20 [affected]
CVSS
- (none)
References
- https://access.redhat.com/security/cve/CVE-2023-2454
- https://www.postgresql.org/support/security/CVE-2023-2454/
- https://security.netapp.com/advisory/ntap-20230706-0006/
Source
cvelistV5-main/cves/2023/2xxx/CVE-2023-2454.json