Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 1

Export CSV
CVE-2021-3515

pglogical: Shell injection by pglogical users with CREATEDB access

A shell injection flaw was found in pglogical in versions before 2.3.4 and before 3.6.26. An attacker with CREATEDB privileges on a PostgreSQL server can craft a database name that allows execution of shell commands as the postgresql user when calling pglogical.create_subscription().

CVSS 3.1 · 6.7 Medium EPSS < 1% KEV · Not listed
Vendors
2ndquadrant
Products
Pglogical