description: A flaw was found in the way Postgresql allowed a user to modify the behavior of a query for other users. An attacker with a user account could use this flaw to execute code with the permissions of superuser in the database. Versions 9.3 through 10 are affected.
problem types: CWE-20
affected:
{
product: postgresql
vendor: The PostgreSQL Global Development Group
versions:
status: affected, version: 9.3 - 10
}