critical9.8
CVE-2021-38140
The set_user extension module before 2.0.1 for PostgreSQL allows a potential privilege escalation using RESET SESSION AUTHORIZATION after set_user().
Impact
The set_user extension module before 2.0.1 for PostgreSQL allows a potential privilege escalation using RESET SESSION AUTHORIZATION after set_user().
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Set User Project | Set User | before 2.0.1 |