Threats tagged 'ghsa-37v9-jh5m-f5pg'

CVE-2024-10978 is a privilege assignment vulnerability in PostgreSQL that allows a less-privileged application user to view or modify rows they should not access. This occurs when the application uses SET ROLE, SET SESSION AUTHORIZATION, or similar features, and queries react to current_setting('role') or the current user ID incorrectly. Versions prior to PostgreSQL 17.1, 16.5, 15.9, 14.14, 13.17, and 12.21 are affected.