CVE-2023-2454

Description

schema_element defeats protective search_path changes; It was found that certain database calls in PostgreSQL could permit an authed attacker with elevated database-level privileges to execute arbitrary code.

References

https://access.redhat.com/security/cve/CVE-2023-2454

https://security.netapp.com/advisory/ntap-20230706-0006/

https://www.postgresql.org/support/security/CVE-2023-2454/

Details

CVSS v3