Description
Untrusted search path vulnerability in PostgreSQL before 7.3.19, 7.4.x before 7.4.17, 8.0.x before 8.0.13, 8.1.x before 8.1.9, and 8.2.x before 8.2.4 allows remote authenticated users, when permitted to call a SECURITY DEFINER function, to gain the privileges of the function owner, related to "search_path settings."
Remediation
References
Related Vulnerabilities
Joomla! Core Multiple SQL Injection Vulnerabilities (2.5.0 - 3.9.13)
WordPress Plugin Slimstat Analytics Cross-Site Scripting (4.1.5.2)
MODX Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2019-1010123)
Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-4401)