CVE-2023-2454

schema_element defeats protective search_path changes; It was found that certain database calls in PostgreSQL could permit an authed attacker with elevated database-level privileges to execute arbitrary code.

Score

CVSS 3.1 7.2 High

Status

Modified - secalert@redhat.com

Published

2023-06-09

Last modified

2025-06-04

Weaknesses

CWE-20

Affected products

• Fedora (Fedoraproject)
• Postgresql (Postgresql)
• Enterprise Linux (Redhat)
• Software Collections (Redhat)

References

• https://access.redhat.com/security/cve/CVE-2023-2454
• https://security.netapp.com/advisory/ntap-20230706-0006/
• https://www.postgresql.org/support/security/CVE-2023-2454/