VULNERABILITY INTELLIGENCE

CVE-2021-38140

CVSS score9.8 CRITICAL

EPSS probability1.29%

CISA KEVNot currently listed

Published2021-08-10

Last modified2026-06-17

Description

The set_user extension module before 2.0.1 for PostgreSQL allows a potential privilege escalation using RESET SESSION AUTHORIZATION after set_user().