CVE Vulnerabilities

CVE-2024-1713

Unexpected Status Code or Return Value

Published: Mar 14, 2024 | Modified: Mar 15, 2024

CVSS 3.x

N/A

Source:

NVD

CVSS 2.x

RedHat/V2

RedHat/V3

Ubuntu

MEDIUM

Additional information

NVD	https://nvd.nist.gov/vuln/detail/CVE-2024-1713
CWE	https://cwe.mitre.org/data/definitions/394.html

A user who can create objects in a database with plv8 3.2.1 installed is able to cause deferred triggers to execute as the Superuser during autovacuum.

Weakness

The product does not properly check when a function or operation returns a value that is legitimate for the function, but is not expected by the product.

References

https://github.com/google/security-research/security/advisories/GHSA-r7m9-grw7-vcc4

Aqua Container Security

Aqua Security is the largest pure-play cloud native security company, providing customers the freedom to innovate and run their businesses with minimal friction. The Aqua Cloud Native Security Platform provides prevention, detection, and response automation across the entire application lifecycle to secure the build, secure cloud infrastructure and secure running workloads wherever they are deployed.