CVE-2020-10733

CVE-2020-10733 affects the Windows PostgreSQL installer (versions 9.5 through 12). The root cause is that the installer invokes system-provided executables without fully-qualified paths, so executables in the load directory or current working directory can be chosen instead of the intended ones. ...