Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-qw3h-8vxv-jf6c

Опубликовано: 12 фев. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 8.8

Описание

Missing validation of type of input in PostgreSQL intarray extension selectivity estimator function allows an object creator to execute arbitrary code as the operating system user running the database. Versions before PostgreSQL 18.2, 17.8, 16.12, 15.16, and 14.21 are affected.

Missing validation of type of input in PostgreSQL intarray extension selectivity estimator function allows an object creator to execute arbitrary code as the operating system user running the database. Versions before PostgreSQL 18.2, 17.8, 16.12, 15.16, and 14.21 are affected.

EPSS

Процентиль: 15%
0.00048
Низкий

8.8 High

CVSS3

Дефекты

CWE-1287

Связанные уязвимости

CVSS3: 8.8
ubuntu
около 1 месяца назад

Missing validation of type of input in PostgreSQL intarray extension selectivity estimator function allows an object creator to execute arbitrary code as the operating system user running the database. Versions before PostgreSQL 18.2, 17.8, 16.12, 15.16, and 14.21 are affected.

CVSS3: 8.8
redhat
около 1 месяца назад

Missing validation of type of input in PostgreSQL intarray extension selectivity estimator function allows an object creator to execute arbitrary code as the operating system user running the database. Versions before PostgreSQL 18.2, 17.8, 16.12, 15.16, and 14.21 are affected.

CVSS3: 8.8
nvd
около 1 месяца назад

Missing validation of type of input in PostgreSQL intarray extension selectivity estimator function allows an object creator to execute arbitrary code as the operating system user running the database. Versions before PostgreSQL 18.2, 17.8, 16.12, 15.16, and 14.21 are affected.

CVSS3: 8.8
debian
около 1 месяца назад

Missing validation of type of input in PostgreSQL intarray extension s ...

CVSS3: 8.8
fstec
около 1 месяца назад

Уязвимость функции оценки избирательности расширения Intarray системы управления базами данных PostgreSQL, позволяющая нарушителю выполнить произвольный код в контексте текущего пользователя

EPSS

Процентиль: 15%
0.00048
Низкий

8.8 High

CVSS3

Дефекты

CWE-1287