CVE-2018-1058CWE-20

A flaw was found in the way Postgresql allowed a user to modify the behavior of a query for other users

published March 2, 2018

CVSS
—
EPSS
13%
Percentile
96.3
In the wild
Unconfirmed
What it is

A flaw was found in the way Postgresql allowed a user to modify the behavior of a query for other users. An attacker with a user account could use this flaw to execute code with the permissions of superuser in the database. Versions 9.3 through 10 are affected.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.13098 · 96.3th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2018-03-02T15:00Z
EPSS history
Timeline
  • 02 MAR 15:00Z
    A flaw was found in the way Postgresql allowed a user to modify the behavior of a query for other users
    cvelistv5