CVE-2017-16082
- Sévérité
- Critique
- CVSS
- 9.8 · CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CISA KEV
- Absente du catalogue KEV en cache
- EPSS
- Aucun score EPSS en cache
Versions touchées et corrigées
OSV n'indique pas de plage semver pour ce paquet dans l'entrée enregistrée.
Le texte simplifié n'apparaît que s'il est déjà en cache. Cette page ne le génère pas.
A remote code execution vulnerability was found within the pg module when the remote database or query specifies a specially crafted column name. There are 2 likely scenarios in which one would likely be vulnerable. 1) Executing unsafe, user-supplied sql which contains a malicious column name. 2) C…
A remote code execution vulnerability was found within the pg module when the remote database or query specifies a specially crafted column name. There are 2 likely scenarios in which one would likely be vulnerable. 1) Executing unsafe, user-supplied sql which contains a malicious column name. 2) Connecting to an untrusted database and executing a query which returns results where any of the column names are malicious.
Alias : GHSA-wc9v-mj63-m9g5
Alerte sur OSV.dev · publiée le 2018-06-07 · modifiée le 2026-03-14