CVE-2017-16082
- Gravedad
- Crítica
- CVSS
- 9.8 · CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CISA KEV
- No está en el catálogo KEV en caché
- EPSS
- Sin puntuación EPSS en caché
Versiones afectadas y corregidas
OSV no indicó un rango semver para este paquete en la entrada guardada.
El texto en lenguaje claro solo aparece si ya está en caché. Esta página no lo genera.
A remote code execution vulnerability was found within the pg module when the remote database or query specifies a specially crafted column name. There are 2 likely scenarios in which one would likely be vulnerable. 1) Executing unsafe, user-supplied sql which contains a malicious column name. 2) C…
A remote code execution vulnerability was found within the pg module when the remote database or query specifies a specially crafted column name. There are 2 likely scenarios in which one would likely be vulnerable. 1) Executing unsafe, user-supplied sql which contains a malicious column name. 2) Connecting to an untrusted database and executing a query which returns results where any of the column names are malicious.
Alias: GHSA-wc9v-mj63-m9g5
Aviso en OSV.dev · publicado el 2018-06-07 · modificado el 2026-03-14