3 ms·

https://www.postgresql.org/about/news/cve-2019-9193-not-a-security-vulnerability-1935/ https://www.postgresql.org/about/news/cve-2019-9193-not-a-se... > There

https://www.postgresql.org/about/news/cve-2019-9193-not-a-security-vulnerability-1935/ https://www.postgresql.org/about/news/cve-2019-9193-not-a-se... > There is widespread mention in the media of a security vulnerability in PostgreSQL, registered as CVE-2019-9193. The PostgreSQL Security Team would like to emphasize that this is not a security vulnerability. We believe the CVE entry was filed in error. We have contacted the reporter to investigate the issue.

LinuxBender 5y ago
For what it's worth, the PoC code is on that URL allowing one to test the script against their servers. I do not currently have that range of versions installed anywhere to test against. Im on 14
- brodouevencode 5y ago
  And I'm too scared to try against mine
  - merb 5y ago
    it works if you are superuser. else it wont. also who allows users to run untrusted sql.