mirror of
https://github.com/0xMarcio/cve.git
synced 2026-05-30 00:49:28 +02:00
694 B
694 B
CVE-2025-2291
Description
Password can be used past expiry in PgBouncer due to auth_query not taking into account Postgres its VALID UNTIL value, which allows an attacker to log in with an already expired password
POC
Reference
No PoCs from references.