7 matches found
CVE-2023-23554
Uncontrolled search path element vulnerability exists in pgivm versions prior to 1.5.1. When refreshing an IMMV, pgivm executes functions without specifying schema names. Under certain conditions, pgivm may be tricked to execute unexpected functions from other schemas with the IMMV owner's...
CVE-2023-23554
creationtimestamp| type| source ---|---|--- 2025-03-08 04:34:10+00:00| seen| Telegram/Jigq2RCeZ1F5lZXRAs54i19gqOZ3QtsYIWN0Dr8IvWsrft7M...
CVE-2023-23554
Uncontrolled search path element vulnerability exists in pgivm versions prior to 1.5.1. When refreshing an IMMV, pgivm executes functions without specifying schema names. Under certain conditions, pgivm may be tricked to execute unexpected functions from other schemas with the IMMV owner's...
CVE-2023-23554
Uncontrolled search path element vulnerability exists in pgivm versions prior to 1.5.1. When refreshing an IMMV, pgivm executes functions without specifying schema names. Under certain conditions, pgivm may be tricked to execute unexpected functions from other schemas with the IMMV owner's...
CVE-2023-23554
CVE-2023-23554 affects the pg_ivm PostgreSQL extension (versions prior to 1.5.1). When refreshing an Incrementally Maintained Materialized View (IMMV), pg_ivm may execute functions without fully qualifying schema names, allowing potential execution of functions from other schemas with the IMMV ow...
CVE-2023-23554
Uncontrolled search path element vulnerability exists in pgivm versions prior to 1.5.1. When refreshing an IMMV, pgivm executes functions without specifying schema names. Under certain conditions, pgivm may be tricked to execute unexpected functions from other schemas with the IMMV owner's...
JVN#19872280: Multiple vulnerabilities in PostgreSQL extension module pg_ivm
pgivm provided by IVM Development Group is a PostgreSQL extension module that provides incremental view maintenance functionality of materialized views. pgivm contains multiple vulnerabilities listed below. Exposure of sensitive information to an unauthorized actor CWE-200 - CVE-2023-22847 An...