2 matches found
PT-2026-145801
Use after free in PostgreSQL COPY FROM error reporting allows a database user to disclose portions of server memory, via a longer input row following an ignored or nullified conversion error. file fdw reaches the same code path in affected version 18. Within major versions 17-18, minor versions...
4.3CVSS6.3AI score0.00295EPSS
SaveExploits0References2
CVE-2022-24854
Summary of CVE-2022-24854 (Metabase) : Metabase uses SQLite with an FDW-like feature called ATTACH DATABASE. If an attacker has SQL permissions on at least one SQLite database, they can attach that database to a second one and query across all attached tables. Exploitation requires knowledge of t...
8.8CVSS8.5AI score0.01053EPSS
SaveExploits0References2Affected Software1
20