| Package | Affected versions | Patched versions |
|---|---|---|
| postgresql | ≥ 7.4, < 7.4.17≥ 8.0, < 8.0.13≥ 8.1, < 8.1.9≥ 8.2, < 8.2.4< 7.3.19 | 7.4.178.0.138.1.98.2.47.3.19 |
Untrusted search path vulnerability in PostgreSQL before 7.3.19, 7.4.x before 7.4.17, 8.0.x before 8.0.13, 8.1.x before 8.1.9, and 8.2.x before 8.2.4 allows remote authenticated users, when permitted to call a SECURITY DEFINER function, to gain the privileges of the function owner, related to "search_path settings."
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free