Описание
AWS Advanced Go Wrapper: Privilege Escalation in Aurora PostgreSQL Instance
Description of Vulnerability:
An issue in AWS Wrappers for Amazon Aurora PostgreSQL may allow for privilege escalation to rds_superuser role. A low privilege authenticated user can create a crafted function that could be executed with permissions of other Amazon Relational Database Service (RDS) users.
AWS recommends customers upgrade to the following versions: AWS Go Wrapper to 2025-10-17.
Source of Vulnerability Report:
Allistair Ishmael Hakim allistair.hakim@gmail.com
Affected products & versions:
AWS Go Wrapper < 2025-10-17.
Platforms:
MacOS/Windows/Linux
Пакеты
Наименование
github.com/aws/aws-advanced-go-wrapper/awssql
go
Затронутые версииВерсия исправления
< 1.1.1
1.1.1
8 High
CVSS3
Дефекты
CWE-470
8 High
CVSS3
Дефекты
CWE-470