CyberRota Analysis
AI-GeneratedPostgreSQL Anonymizer is vulnerable to a SQL injection flaw in its import functions, allowing attackers to execute malicious code with superuser privileges by crafting a malicious JSON document. This vulnerability poses a risk to any organization using affected versions of PostgreSQL Anonymizer, particularly those with superuser access, and should be prioritized for remediation. Users should upgrade to PostgreSQL Anonymizer version 3.1.4 or later to mitigate this risk.
Original NVD Description
PostgreSQL Anonymizer contains a SQL injection vulnerability in two import functions. A user can create a malicious JSON document containing specially crafted object names. If a superuser subsequently calls anon.import_database_rules() or anon.import_roles_rules(), the malicious code is executed with superuser privileges. The issue is fixed in PostgreSQL Anonymizer 3.1.4 and later