Lucene search

K
osvGoogleOSV:CVE-2021-33204
HistoryMay 19, 2021 - 5:15 p.m.

CVE-2021-33204

2021-05-1917:15:07
Google
osv.dev
9
cve-2021-33204
pg partition manager
postgresql
security definer
arbitrary code execution

AI Score

7.7

Confidence

High

EPSS

0.005

Percentile

77.0%

In the pg_partman (aka PG Partition Manager) extension before 4.5.1 for PostgreSQL, arbitrary code execution can be achieved via SECURITY DEFINER functions because an explicit search_path is not set.

AI Score

7.7

Confidence

High

EPSS

0.005

Percentile

77.0%