CVE-2023-2454

CVSS V2 None CVSS V3 None
Description
schema_element defeats protective search_path changes; It was found that certain database calls in PostgreSQL could permit an authed attacker with elevated database-level privileges to execute arbitrary code.
Overview
  • CVE ID
  • CVE-2023-2454
  • Assigner
  • redhat
  • Vulnerability Status
  • PUBLISHED
  • Published Version
  • 2023-06-09T00:00:00
  • Last Modified Date
  • 2023-07-06T00:00:00
Weakness Enumerations
CWE URL
CWE-20 http://cwe.mitre.org/data/definitions/20.html
References
Reference URL Reference Tags
https://access.redhat.com/security/cve/CVE-2023-2454
https://www.postgresql.org/support/security/CVE-2023-2454/
https://security.netapp.com/advisory/ntap-20230706-0006/
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2023-2454
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2454
History
Created Old Value New Value Data Type Notes
2024-06-24 21:53:21 Added to TrackCVE