CVE-2023-2454

Name of the Vulnerable Software and Affected Versions PostgreSQL (affected versions not specified)

Description The issue is related to a component of the PostgreSQL database management system, specifically the Schema Handler, which has inadequate access control. This can allow a remote attacker with elevated database-level privileges to execute arbitrary code by exploiting the schema element that defeats protective search path changes. The exploitation can be done using the CREATE SCHEMA command.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.