9.4Crítica
CloudNativePG: Metrics exporter allows privilege escalation to PostgreSQL superuser and OS RCE
cloudnative-pg cloudnative-pg; Red Hat Red Hat Openshift Data Foundation 4
CloudNativePG is a platform designed to manage PostgreSQL databases within Kubernetes environments. Prior to 1.29.1 and 1.28.3, the CloudNativePG metrics exporter opens its PostgreSQL connection as the postgres superuser via the pod-local Unix socket, then de…