AZL-66303
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-66303.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/AZL-66303
- Upstream
- Published
- 2025-08-14T13:15:37Z
- Modified
- 2026-04-01T05:20:56.596737Z
- Summary
- CVE-2025-8714 affecting package postgresql for versions less than 16.10-1
- Details
-
Untrusted data inclusion in pgdump in PostgreSQL allows a malicious superuser of the origin server to inject arbitrary code for restore-time execution as the client operating system account running psql to restore the dump, via psql meta-commands. pgdumpall is also affected. pg_restore is affected when used to generate a plain-format dump. This is similar to MySQL CVE-2024-21096. Versions before PostgreSQL 17.6, 16.10, 15.14, 14.19, and 13.22 are affected.
- References