cve/2020/CVE-2020-25695.md

### [CVE-2020-25695](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25695)
![](https://img.shields.io/static/v1?label=Product&message=postgresql&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-89&color=brighgreen)

### Description

A flaw was found in PostgreSQL versions before 13.1, before 12.5, before 11.10, before 10.15, before 9.6.20 and before 9.5.24. An attacker having permission to create non-temporary objects in at least one schema can execute arbitrary SQL functions under the identity of a superuser. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

### POC

#### Reference
No PoCs from references.

#### Github
- https://github.com/Live-Hack-CVE/CVE-2020-25695
- https://github.com/alphaSeclab/sec-daily-2020
- https://github.com/splunk-soar-connectors/cloudpassagehalo