VDB
BIT-postgresql-2024-0985
BIT-postgresql-2024-0985
PUBLISHED
CVSS 8 HIGH
PostgreSQL non-owner REFRESH MATERIALIZED VIEW CONCURRENTLY executes arbitrary SQL
Risk Scores
CVSS 3.1
8
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Bitnami | postgresql | 12.0.0, 13.0.0, 14.0.0 |
Exploit Intelligence
- cve_rules.hpp (github-poc)
- nvd_db.cpp (github-poc)
- cve_db.json (github-poc)
- GenerationConfig.java (github-poc)
- SelfAdaptationGenerationConfig.java (github-poc)
Timeline
- Mar 6, 2024 CVE Published
- May 20, 2025 CVE Updated
References
- https://www.postgresql.org/support/security/CVE-2024-0985/ url
- https://lists.debian.org/debian-lts-announce/2024/03/msg00017.html url
- https://saites.dev/projects/personal/postgres-cve-2024-0985/ url
- https://security.netapp.com/advisory/ntap-20241220-0005/ url
- https://nvd.nist.gov/vuln/detail/CVE-2024-0985 url