Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-qpxx-2fwx-f5qj

Опубликовано: 03 дек. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

Untrusted search path in auth_query connection handler in PgBouncer before 1.25.0 allows an unauthenticated attacker to execute arbitrary SQL during authentication via a malicious search_path parameter in the StartupMessage.

Untrusted search path in auth_query connection handler in PgBouncer before 1.25.0 allows an unauthenticated attacker to execute arbitrary SQL during authentication via a malicious search_path parameter in the StartupMessage.

EPSS

Процентиль: 33%
0.00387
Низкий

7.5 High

CVSS3

Дефекты

CWE-426

Связанные уязвимости

CVSS3: 8.1
ubuntu
11 месяцев назад

Untrusted search path in auth_query connection handler in PgBouncer before 1.25.1 allows an unauthenticated attacker to execute arbitrary SQL during authentication via a malicious search_path parameter in the StartupMessage.

CVSS3: 8.1
nvd
11 месяцев назад

Untrusted search path in auth_query connection handler in PgBouncer before 1.25.1 allows an unauthenticated attacker to execute arbitrary SQL during authentication via a malicious search_path parameter in the StartupMessage.

CVSS3: 7.5
msrc
11 месяцев назад

Untrusted search path in auth_query connection in PgBouncer

CVSS3: 8.1
debian
11 месяцев назад

Untrusted search path in auth_query connection handler in PgBouncer be ...

CVSS3: 8.1
redos
9 месяцев назад

Уязвимость pgbouncer

EPSS

Процентиль: 33%
0.00387
Низкий

7.5 High

CVSS3

Дефекты

CWE-426