CVE-2018-1058

2018-03-0100:00:00

CWE-20

redhat

www.cve.org

7.7 High

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

75.9%

JSON

A flaw was found in the way Postgresql allowed a user to modify the behavior of a query for other users. An attacker with a user account could use this flaw to execute code with the permissions of superuser in the database. Versions 9.3 through 10 are affected.

CNA Affected

[
  {
    "product": "postgresql",
    "vendor": "The PostgreSQL Global Development Group",
    "versions": [
      {
        "status": "affected",
        "version": "9.3 - 10"
      }
    ]
  }
]