Lucene search
K

5 matches found

RedhatCVE
RedhatCVE
added 2025/08/20 5:33 p.m.6 views

CVE-2025-55282

aiven-db-migrate is an Aiven database migration tool. Prior to 1.0.7, there is a privilege escalation vulnerability that allows a user to elevate to superuser inside PostgreSQL databases during a migration from an untrusted source server. By exploiting a lack of searchpath restriction, an attacke...

9.1CVSS6.6AI score0.0015EPSS
Exploits0References1
NVD
NVD
added 2025/08/18 5:15 p.m.4 views

CVE-2025-55282

aiven-db-migrate is an Aiven database migration tool. Prior to 1.0.7, there is a privilege escalation vulnerability that allows a user to elevate to superuser inside PostgreSQL databases during a migration from an untrusted source server. By exploiting a lack of searchpath restriction, an attacke...

9.1CVSS0.0015EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/08/18 4:46 p.m.2 views

CVE-2025-55283 aiven-db-migrate allows Privilege Escalation through use of psql during migration

aiven-db-migrate is an Aiven database migration tool. Prior to 1.0.7, there is a privilege escalation vulnerability that allows elevation to superuser inside PostgreSQL databases during a migration from an untrusted source server. The vulnerability stems from psql executing commands embedded in a...

9.1CVSS7.3AI score0.00106EPSS
Exploits0References2
OSV
OSV
added 2025/08/18 4:44 p.m.4 views

CVE-2025-55282 aiven-db-migrate allows Privilege Escalation via unrestricted search_path during migration

aiven-db-migrate is an Aiven database migration tool. Prior to 1.0.7, there is a privilege escalation vulnerability that allows a user to elevate to superuser inside PostgreSQL databases during a migration from an untrusted source server. By exploiting a lack of searchpath restriction, an attacke...

9.1CVSS7.1AI score0.0015EPSS
Exploits0References4
CNNVD
CNNVD
added 2025/08/18 12:0 a.m.2 views

aiven-db-migrate 路径遍历漏洞

aiven-db-migrate is an Aiven open source application. A path traversal vulnerability exists in aiven-db-migrate versions prior to 1.0.7, which stems from an elevation of privilege vulnerability that could lead to superuser privilege acquisition...

9.1CVSS7AI score0.0015EPSS
Exploits0References3
Rows per page
Query Builder