CVE-2023-41118

An issue was discovered in EnterpriseDB Postgres Advanced Server (EPAS) before 11.21.32, 12.x before 12.16.20, 13.x before 13.12.16, 14.x before 14.9.0, and…

published December 12, 2023

CVSS
—
EPSS
1%
Percentile
55.2
In the wild
Unconfirmed
What it is

An issue was discovered in EnterpriseDB Postgres Advanced Server (EPAS) before 11.21.32, 12.x before 12.16.20, 13.x before 13.12.16, 14.x before 14.9.0, and 15.x before 15.4.0. It may allow an authenticated user to bypass authorization requirements and access underlying implementation functions. When a superuser has configured file locations using CREATE DIRECTORY, these functions allow users to take a wide range of actions, including read, write, copy, rename, and delete.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00772 · 55.2th percentile
Published
2023-12-12T00:00Z
EPSS history
Timeline
  • 12 DEC 00:00Z
    An issue was discovered in EnterpriseDB Postgres Advanced Server (EPAS) before 11.21.32, 12.x before 12.16.20, 13.x before 13.12.16, 14.x before 14.9.0, and…
    cvelistv5