CVEDB API

The set_user extension module before 2.0.1 for PostgreSQL allows a potential privilege escalation using RESET SESSION AUTHORIZATION after set_user().

Exploit prediction scoring system (EPSS) score

EPSS Score 0.004

EPSS Ranking 57.6%

CVSS Severity

CVSS v3 Score 9.8

CVSS v2 Score 7.5

References

Products affected by CVE-2021-38140

Set User Project » Set User » Version: N/A

cpe:2.3:a:set_user_project:set_user:-
Set User Project » Set User » Version: 1.0.0

cpe:2.3:a:set_user_project:set_user:1.0.0
Set User Project » Set User » Version: 1.0.1

cpe:2.3:a:set_user_project:set_user:1.0.1
Set User Project » Set User » Version: 1.1.0

cpe:2.3:a:set_user_project:set_user:1.1.0
Set User Project » Set User » Version: 1.2.0

cpe:2.3:a:set_user_project:set_user:1.2.0
Set User Project » Set User » Version: 1.3.0

cpe:2.3:a:set_user_project:set_user:1.3.0
Set User Project » Set User » Version: 1.4.0

cpe:2.3:a:set_user_project:set_user:1.4.0
Set User Project » Set User » Version: 1.5.0

cpe:2.3:a:set_user_project:set_user:1.5.0
Set User Project » Set User » Version: 1.6.0

cpe:2.3:a:set_user_project:set_user:1.6.0
Set User Project » Set User » Version: 1.6.1

cpe:2.3:a:set_user_project:set_user:1.6.1
Set User Project » Set User » Version: 1.6.2

cpe:2.3:a:set_user_project:set_user:1.6.2
Set User Project » Set User » Version: 2.0.0

cpe:2.3:a:set_user_project:set_user:2.0.0