CVE-2019-10211 HIGH

CVE-2019-10211

Vendor Postgresql
Product postgresql
Weakness CWE-94 · Code injection
Published October 29, 2019
Last update August 4, 2024
View on NVD All CVEs

CVSS base score

7.8/10
Attack vector Local
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

Postgresql Windows installer before versions 11.5, 10.10, 9.6.15, 9.5.19, 9.4.24 is vulnerable via bundled OpenSSL executing code from unprotected directory.

Key dates

02Disclosure timeline

October 29, 2019 CVE published
August 4, 2024 Record updated

Related vulnerabilities

04Related CVE

CVE-2025-30911 WordPress RomethemeKit For Elementor plugin <= 1.5.4 - Arbitrary Plugin Installation/Activation to RCE vulnerability CVE-2025-58764 Claude Code rg command had Command Injection that allowed bypass of user approval prompt for command execution CVE-2024-11740 Download Manager <= 3.3.03 - Unauthenticated Arbitrary Shortcode Execution CVE-2024-49254 WordPress ajax-extend plugin <= 1.0 - Remote Code Execution (RCE) vulnerability CVE-2026-11393 Code injection via improper triple-quote escaping in AgentCore CLI Bedrock Agent import