VDB
BDU%3A2024-01921
BDU%3A2024-01921
PUBLISHED
CVSS 10 CRITICAL
Уязвимость набора инструментов для работы с PostgreSQL pgx, связанная с непринятием мер по защите структуры SQL-запроса, позволяющая нарушителю выполнять произвольные SQL-запросы
Risk Scores
CVSS 2.0
10
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Сообщество свободного программного обеспечения | pgx |
Timeline
- Mar 12, 2024 CVE Published
- Mar 23, 2026 CVE Updated
References
- https://github.com/jackc/pgproto3/commit/945c2126f6db8f3bea7eeebe307c01fe92bca007 url
- https://github.com/jackc/pgproto3/security/advisories/GHSA-7jwh-3vrq-q3m8 url
- https://github.com/jackc/pgx/commit/adbb38f298c76e283ffc7c7a3f571036fea47fd4 advisory
- https://github.com/jackc/pgx/commit/c543134753a0c5d22881c12404025724cb05ffd8 advisory
- https://github.com/jackc/pgx/commit/f94eb0e2f96782042c96801b5ac448f44f0a81df advisory
- https://github.com/jackc/pgx/security/advisories/GHSA-mrww-27vc-gghv url
- https://github.com/flying-owl/Go-PGX-Vulnerability-POC-Public-Mirror url