CVE-2007-2138

Untrusted search path vulnerability in PostgreSQL before 7.3.19, 7.4.x before 7.4.17, 8.0.x before 8.0.13, 8.1.x before 8.1.9, and 8.2.x before 8.2.4 allows…

published April 24, 2007

CVSS
—
EPSS
4%
Percentile
89.6
In the wild
Unconfirmed
What it is

Untrusted search path vulnerability in PostgreSQL before 7.3.19, 7.4.x before 7.4.17, 8.0.x before 8.0.13, 8.1.x before 8.1.9, and 8.2.x before 8.2.4 allows remote authenticated users, when permitted to call a SECURITY DEFINER function, to gain the privileges of the function owner, related to "search_path settings."

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03690 · 89.6th percentile
Published
2007-04-24T20:00Z
EPSS history
Timeline
  • 24 APR 20:00Z
    Untrusted search path vulnerability in PostgreSQL before 7.3.19, 7.4.x before 7.4.17, 8.0.x before 8.0.13, 8.1.x before 8.1.9, and 8.2.x before 8.2.4 allows…
    cvelistv5