CVE-2023-2454

Published: Jun 9, 2023

Modified: Jun 4, 2025

PUBLISHED

Description

schema_element defeats protective search_path changes; It was found that certain database calls in PostgreSQL could permit an authed attacker with elevated database-level privileges to execute arbitrary code.

Vendor	Product	Versions
n/a	postgresql	affected `PostgreSQL 15.3, PostgreSQL 14.8, PostgreSQL 13.11, PostgreSQL 12.15, PostgreSQL 11.20`

Weaknesses (CWE)

CWE-20

References

https://access.redhat.com/security/cve/CVE-2023-2454

https://www.postgresql.org/support/security/CVE-2023-2454/

https://security.netapp.com/advisory/ntap-20230706-0006/

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2023-2454

Description

Affected Products

Weaknesses (CWE)

References