CVE-2019-15658

CVE-2019-15658 describes a SQL injection vulnerability in connect-pg-simple versions prior to 6.0.1. This flaw allows an attacker to execute arbitrary SQL commands if untrusted data is used for the tableName or schemaName parameters. With a CVSS score of 7.3 (HIGH), this vulnerability is easily exploitable over the network with no user interaction, potentially leading to low impact on confidentiality, integrity, and availability. There is currently no evidence of active exploitation, nor are there publicly available exploit modules or significant community discussion surrounding this CVE.