Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-qpxx-2fwx-f5qj

Опубликовано: 03 дек. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

Untrusted search path in auth_query connection handler in PgBouncer before 1.25.0 allows an unauthenticated attacker to execute arbitrary SQL during authentication via a malicious search_path parameter in the StartupMessage.

Untrusted search path in auth_query connection handler in PgBouncer before 1.25.0 allows an unauthenticated attacker to execute arbitrary SQL during authentication via a malicious search_path parameter in the StartupMessage.

EPSS

Процентиль: 34%
0.00135
Низкий

7.5 High

CVSS3

Дефекты

CWE-426

Связанные уязвимости

CVSS3: 7.5
ubuntu
2 месяца назад

Untrusted search path in auth_query connection handler in PgBouncer before 1.25.1 allows an unauthenticated attacker to execute arbitrary SQL during authentication via a malicious search_path parameter in the StartupMessage.

CVSS3: 7.5
nvd
2 месяца назад

Untrusted search path in auth_query connection handler in PgBouncer before 1.25.1 allows an unauthenticated attacker to execute arbitrary SQL during authentication via a malicious search_path parameter in the StartupMessage.

CVSS3: 7.5
msrc
2 месяца назад

Untrusted search path in auth_query connection in PgBouncer

CVSS3: 7.5
debian
2 месяца назад

Untrusted search path in auth_query connection handler in PgBouncer be ...

EPSS

Процентиль: 34%
0.00135
Низкий

7.5 High

CVSS3

Дефекты

CWE-426