CVE-2023-2454

Vulners
Cvelist
CVE-2023-2454

2023-06-0900:00:00

CWE-20

redhat

www.cve.org

postgresql

cve-2023-2454

database

code execution

security vulnerability

7.7 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

68.9%

JSON

schema_element defeats protective search_path changes; It was found that certain database calls in PostgreSQL could permit an authed attacker with elevated database-level privileges to execute arbitrary code.

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "postgresql",
    "versions": [
      {
        "version": "PostgreSQL 15.3, PostgreSQL 14.8, PostgreSQL 13.11, PostgreSQL 12.15, PostgreSQL 11.20",
        "status": "affected"
      }
    ]
  }
]