Lucene search

K
osvGoogleOSV:CVE-2018-16850
HistoryNov 13, 2018 - 3:29 p.m.

CVE-2018-16850

2018-11-1315:29:00
Google
osv.dev
18

EPSS

0.004

Percentile

74.0%

postgresql before versions 11.1, 10.6 is vulnerable to a to SQL injection in pg_upgrade and pg_dump via CREATE TRIGGER … REFERENCING. Using a purpose-crafted trigger definition, an attacker can cause arbitrary SQL statements to run, with superuser privileges.