Approved changes feed: RSS · Atom

cpe:2.3:a:pgxn:pg_partman:*:*:*:*:*:postgresql:*:*

part: a version: * update: *

VendorPgxn (d1c9d161-3024-5c46-b0d0-d672caee177b)
ProductPg Partman (ede1a16e-b5b6-52e0-81cb-6a7097fce198)
Edition*
Language*
Software edition*
Target softwarepostgresql
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-33204 vulnerable 2026-06-08 05:32:11.007240 Details available
In the pg_partman (aka PG Partition Manager) extension before 4.5.1 for PostgreSQL, arbitrary code execution can be achieved via SECURITY DEFINER functions because an explicit search_path is not set.
Published: 2021-05-19T16:23:30.000Z
Updated: 2024-08-03T23:42:20.291Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.