Beveiligingsadvies

CVE-2026-11945

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-06-11 15:53:24
Laatst bijgewerkt 2026-06-12 03:55:36
Toegewezen door PostgreSQL
CVSS-score 6.4
Status PUBLISHED

Beschrijving

PostgreSQL Anonymizer contains a vulnerability that allows a user to gain superuser privileges by creating a JSON document and placing malicious code inside a particular key-value pair. If a superuser calls the import_database_rules() or import_roles_rules() functions, the malicious code is executed with superuser privileges. The problem is resolved in PostgreSQL Anonymizer 3.1.1 and further versions