onyx --cves cve-2020-25695
CVE-2020-25695
- score
- <0.1
- cvss
- 8.8
- epss
- 46.4%
- published
- 2020-11-16
- kev added
- —
- first seen
PostgreSQL versions before 13.1, 12.5, 11.10, 10.15, 9.6.20, and 9.5.24 contain a privilege escalation caused by allowing creation of non-temporary objects in at least one schema, letting attackers execute arbitrary SQL functions as superuser, exploit requires permission to create objects.
Timeline
How this CVE moved toward exploitation. Chart: last 30 days — trend score, EPSS, community mentions per day; hover the event lane.
- Published
- Tracked by Onyx