Lucene search

K
cvelistMitreCVELIST:CVE-2021-33204
HistoryMay 19, 2021 - 4:23 p.m.

CVE-2021-33204

2021-05-1916:23:30
mitre
www.cve.org
4
pg partition manager
postgresql
arbitrary code execution
security definer functions
search_path not set

AI Score

10

Confidence

High

EPSS

0.005

Percentile

77.0%

In the pg_partman (aka PG Partition Manager) extension before 4.5.1 for PostgreSQL, arbitrary code execution can be achieved via SECURITY DEFINER functions because an explicit search_path is not set.

AI Score

10

Confidence

High

EPSS

0.005

Percentile

77.0%