Executive brief
Untrusted Search Path in PostgreSQL
Affected products
- Maven org.postgresql:postgresql
Junglewise Threat Intelligence
Untrusted Search Path in PostgreSQL
Severity: low · CVSS 3.1 · Published 2022-02-15
Technologies: org.postgresql:postgresql (Maven). Vendors: Maven.
Related threats
- PostgreSQL pgjdbc authentication downgrade in ScramAuthenticator
- PostgreSQL pgjdbc denial of service via unbounded SCRAM iterations
- pgjdbc Client Allows Fallback to Insecure Authentication Despite channelBinding=require Configuration
- Unescaped parameters in the PostgreSQL JDBC driver
- Path traversal in org.postgresql:postgresql