CVEDB API

The set_user extension module before 3.0.0 for PostgreSQL allows ProcessUtility_hook bypass via set_config.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.004

EPSS Ranking 61.9%

CVSS Severity

CVSS v3 Score 9.8

CVSS v2 Score 7.5

References

Products affected by CVE-2021-41558

Set User Project » Set User » Version: N/A

cpe:2.3:a:set_user_project:set_user:-
Set User Project » Set User » Version: 1.0.0

cpe:2.3:a:set_user_project:set_user:1.0.0
Set User Project » Set User » Version: 1.0.1

cpe:2.3:a:set_user_project:set_user:1.0.1
Set User Project » Set User » Version: 1.1.0

cpe:2.3:a:set_user_project:set_user:1.1.0
Set User Project » Set User » Version: 1.2.0

cpe:2.3:a:set_user_project:set_user:1.2.0
Set User Project » Set User » Version: 1.3.0

cpe:2.3:a:set_user_project:set_user:1.3.0
Set User Project » Set User » Version: 1.4.0

cpe:2.3:a:set_user_project:set_user:1.4.0
Set User Project » Set User » Version: 1.5.0

cpe:2.3:a:set_user_project:set_user:1.5.0
Set User Project » Set User » Version: 1.6.0

cpe:2.3:a:set_user_project:set_user:1.6.0
Set User Project » Set User » Version: 1.6.1

cpe:2.3:a:set_user_project:set_user:1.6.1
Set User Project » Set User » Version: 1.6.2

cpe:2.3:a:set_user_project:set_user:1.6.2
Set User Project » Set User » Version: 2.0.0

cpe:2.3:a:set_user_project:set_user:2.0.0
Set User Project » Set User » Version: 2.0.1

cpe:2.3:a:set_user_project:set_user:2.0.1