CVSS 8.8 · High EPSS 0,36%
Kerentanan Inclusion of Functionality from Untrusted Control Sphere pada postgresql. Skor CVSS 3.1 8.8 (High) menurut CNA.
Untrusted data inclusion in pg_dump in PostgreSQL allows a malicious superuser of the origin server to inject arbitrary code for restore-time execution as the client operating system account running psql to restore the dump, via psql \restrict meta-command input expansion. The fix for CVE-2025-8714 introduced \restrict and \unrestrict to block this attack, but \unrestrict itself was sufficient for an attack. pg_dumpall is also affected. pg_restore is affected when used to generate a plain-format dump. Non-core use of \restrict would be affected, but we've not identified non-core use. Versions before PostgreSQL 18.6, 17.11, 16.15, 15.19, and 14.24 are affected.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
· uraikan di kalkulator | Vendor | Produk | Versi terdampak |
|---|---|---|
| postgresql | postgresql | Versi 14.0 hingga sebelum 14.24 |
| postgresql | postgresql | Versi 15.0 hingga sebelum 15.19 |
| postgresql | postgresql | Versi 16.0 hingga sebelum 16.15 |
| postgresql | postgresql | Versi 17.0 hingga sebelum 17.11 |
| postgresql | postgresql | Versi 18.0 hingga sebelum 18.5 |