CVE-2023-41114

Summary

CVE-2023-41114 is a vulnerability affecting EnterpriseDB Postgres Advanced Server versions before 11.21.32, 12.x before 12.16.20, 13.x before 13.12.16, 14.x before 14.9.0, and 15.x before 15.4.0. The issue lies in the functions get_url_as_text and get_url_as_bytea, which can be publicly executed by authenticated users. This allows the users to read any file from the local filesystem or remote system, disregarding their given permissions.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.