CVE-2023-31131

CVE-2023-31131 affects Greenplum Database (GPDB). The vulnerability arises from unsafe tar extraction within GPPKGs in versions prior to 6.22.3, enabling a path traversal that can lead to arbitrary file writes. An attacker could overwrite data or system files, potentially causing crashes or malfu...

Information Disclosure

github.com/greenplum-db/gpdb/ is vulnerable to information disclosure. A malicious user with log access can read sensitive information about users...