onyx --cves cve-2020-14349
CVE-2020-14349
- score
- <0.1
- cvss
- 7.1
- epss
- 2.2%
- published
- 2020-08-24
- kev added
- —
- first seen
PostgreSQL < 12.4, < 11.9, < 10.14 contain a SQL injection caused by improper sanitization of search_path during logical replication, letting authenticated attackers execute arbitrary SQL commands in the replication user context, exploit requires authentication.
Timeline
How this CVE moved toward exploitation. Chart: last 30 days — trend score, EPSS, community mentions per day; hover the event lane.
- Published
- Tracked by Onyx
Weaknesses
References 8
- https://security.netapp.com/advisory/ntap-20200918-0002/
- https://usn.ubuntu.com/4472-1/
- http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00049.html
- http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00050.html
- http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00003.html
- http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00008.html
- https://bugzilla.redhat.com/show_bug.cgi?id=1865744
- https://security.gentoo.org/glsa/202008-13