GitHub Advisoryadvisory · Maven

GHSA-7xw4-g7mm-r4hh Amazon Web Services Advanced JDBC Wrapper: Privilege Escalation in Aurora PostgreSQL instance

HIGH Published 2025-11-13 Modified 2025-11-13 Official page ↗
Ecosystem
Maven
Packages
software.amazon.jdbc:aws-advanced-jdbc-wrapper
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Weaknesses
CWE-470
Reviewed
2025-11-13

Affected packages

• Maven software.amazon.jdbc:aws-advanced-jdbc-wrapper: < 2.6.5 → fixed in 2.6.5

Description

Description of Vulnerability: An issue in AWS Wrappers for Amazon Aurora PostgreSQL may allow for privilege escalation to rds_superuser role. A low privilege authenticated user can create a crafted function that could be executed with permissions of other Amazon Relational Database Service (RDS) users. AWS recommends for customers to upgrade to the following versions: AWS JDBC Wrapper to v2.6.5 or greater. Source of Vulnerability Report: Allistair Ishmael Hakim [email protected] Affected products & versions: AWS JDBC Wrapper < 2.6.5 Platforms: MacOS/Windows/Linux

Related

Weakness · CWE (1)

  • CWE-470 Use of Externally-Controlled Input to Select Classes or Code weakness

References