CVE-2023-32305

CVE-2023-32305 is a high-severity privilege escalation vulnerability affecting the aiven-extras PostgreSQL extension in versions prior to 1.1.9, impacting Aiven PostgreSQL and PostgreSQL Aiven products. The flaw allows a low-privileged user to gain superuser access within the database by exploiting missing schema qualifiers on privileged functions. This can lead to full data access, arbitrary code execution on the underlying host as the postgres user, and has a CVSS score of 8.8 (High) due to its network-based attack vector and low attack complexity. Currently, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this vulnerability.