Set User Project

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Set User Project records in CISA KEV

No Set User Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records in Set User · all components

TI-2021-18295 CVE-2021-41558 · GHSA-vhrg-xm82-77g5

MEDIUM 45

The set_user extension module before 3.0.0 for PostgreSQL allows ProcessUtility_hook bypass via set_config.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0127 Published 2021-09-27 No fix listed

TI-2021-15821 CVE-2021-38140 · GHSA-4fj7-2258-8pjp

MEDIUM 45

The set_user extension module before 2.0.1 for PostgreSQL allows a potential privilege escalation using RESET SESSION AUTHORIZATION after set_user().

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0129 Published 2021-08-10 No fix listed CWE-269