2026-01-08 16:18:20
hackerone
PUBLISHED
This vulnerability allows a Backup Operator to perform remote code execution (RCE) as the postgres user by sending a malicious interval or order parameter.