CVE-2018-1058

CVE-2018-1058 — PostgreSQL 검색 경로 데모 이 저장소에는 다음에 대한 최종 보고서와 재현 산출물이 포함되어 있습니다: CVE-2018-1058: 통제되지 않은 검색 경로를 통한 PostgreSQL 권한 상승 목표는 안전한 로컬 Docker 환경을 사용하여 CVE-2018-1058의 배후에 있는 검색 경로 신뢰 실패를 시연하는 것입니다. 이 데모는 정확한 역사적 pgdump 실행 경로를 재현하지 않습니다. 대신 PostgreSQL 지침에 설명된 동일한 근본 원인을 재현합니다: 공격자가 쓰기 가능한 스키마에 ...

Server-side Request Forgery (SSRF)

Overview org.apache.hive:hive-common is a reading, writing, and managing large datasets residing in distributed storage using SQL. Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via Avro SerDe schema resolution in AvroSerdeUtils.determineSchemaOrThrowExceptio...

Server-side Request Forgery (SSRF)

Overview org.apache.hive:hive-exec is a package for reading, writing, and managing large datasets residing in distributed storage using SQL. Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via Avro SerDe schema resolution in...

CVE-2026-55976

Server-Side Request Forgery SSRF in Avro SerDe schema resolution in Apache Hive before 4.2.1 allows an authenticated remote attacker with CREATE TABLE privilege to cause the Hive server to fetch an attacker-controlled URL when resolving the avro.schema.url table property on an Avro table that is...

CVE-2026-55976 Apache Hive: SSRF vulnerability in Hive Avro Serde due to Insufficient input validation on avro.schema.url

Server-Side Request Forgery SSRF in Avro SerDe schema resolution in Apache Hive before 4.2.1 allows an authenticated remote attacker with CREATE TABLE privilege to cause the Hive server to fetch an attacker-controlled URL when resolving the avro.schema.url table property on an Avro table that is...

CVE-2026-55976: Server-Side Request Forgery (SSRF)

Server-Side Request Forgery SSRF in Avro SerDe schema resolution in Apache Hive before 4.2.1 allows an authenticated remote attacker with CREATE TABLE privilege to cause the Hive server to fetch an attacker-controlled URL when resolving the avro.schema.url table property on an Avro table that is...

PT-2026-81256

Name of the Vulnerable Software and Affected Versions Apache Hive versions prior to 4.2.1 Description An authenticated remote attacker with CREATE TABLE privileges can execute a Server-Side Request Forgery SSRF during Avro SerDe schema resolution. By setting the avro.schema.url table property on ...