cve.bz

CVE-2020-14349

7.1 highEPSS 2.2%

High (7.1). EPSS 2.2% chance of exploitation in the next 30 days.

It was found that PostgreSQL versions before 12.4, before 11.9 and before 10.14 did not properly sanitize the search_path during logical replication. An authenticated attacker could use this flaw in an attack similar to CVE-2018-1058, in order to execute arbitrary SQL command in the context of the user used for replication.

Severity

CVSS 3.1

7.1 high
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
EPSS
2.2% chance of exploitation in the next 30 days; higher than 82% of CVEs (scores of 2026-10-31)
CWEs
CWE-89, CWE-427
Published
Modified
Record from
the NVD, synced

Affected

References

Check your stackJSON