Read the docs

prestosql

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

prestosql records in CISA KEV

No prestosql vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

1 record in Presto · all components

TI-2020-11865 CVE-2020-15087 · GHSA-f6pc-crhh-cp96

Privilege escalation in Presto

Priority MEDIUM 40

In Presto before version 337, authenticated users can bypass authorization checks by directly accessing internal APIs.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01058 Published 2020-06-30 Fixed in 337 CWE-285
Open these records in search →