Lucene search

K
prionPRIOn knowledge basePRION:CVE-2021-3515
HistoryJun 01, 2021 - 2:15 p.m.

Sql injection

2021-06-0114:15:00
PRIOn knowledge base
www.prio-n.com

6.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.2%

A shell injection flaw was found in pglogical in versions before 2.3.4 and before 3.6.26. An attacker with CREATEDB privileges on a PostgreSQL server can craft a database name that allows execution of shell commands as the postgresql user when calling pglogical.create_subscription().

6.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.2%