Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
PostgreSQL Untrusted Search Path Vulnerability - CVE-2020-14350 - Vulnerability Database
PostgreSQL

PostgreSQL Untrusted Search Path Vulnerability - CVE-2020-14350

High
Reference: CVE-2020-14350
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2020-14350
Title: PostgreSQL Untrusted Search Path Vulnerability
Overview:

It was found that some PostgreSQL extensions did not use search_path safely in their installation script. An attacker with sufficient privileges could use this flaw to trick an administrator into executing a specially crafted script during the installation or update of such extension. This affects PostgreSQL versions before 12.4 before 11.9 before 10.14 before 9.6.19 and before 9.5.23.