Lucene search

K
osvGoogleOSV:CVE-2021-3515
HistoryJun 01, 2021 - 2:15 p.m.

CVE-2021-3515

2021-06-0114:15:10
Google
osv.dev
2

7.2 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.2%

A shell injection flaw was found in pglogical in versions before 2.3.4 and before 3.6.26. An attacker with CREATEDB privileges on a PostgreSQL server can craft a database name that allows execution of shell commands as the postgresql user when calling pglogical.create_subscription().

7.2 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.2%