CVE-2022-24128

Timescale TimescaleDB 1.x and 2.x before 2.5.2 may allow privilege escalation during extension installation. The installation process uses commands such as CREATE x IF NOT EXIST that allow an unprivileged user to precreate objects. These objects will be used by the installer (which executes as Superuser), leading to privilege escalation. In order to be able to take advantage of this, an unprivileged user would need to be able to create objects in a database and then get a Superuser to install TimescaleDB into their database. (In the fixed versions, the installation aborts when it finds that an object already exists.)

• CWE-863

• https://docs.timescale.com/timescaledb/latest/overview/release-notes/Release Notes, Vendor Advisory
• https://github.com/timescale/timescaledb/commit/6275c2985927cfd4900b85cac5120227c8cb1f0c
• https://github.com/timescale/timescaledb/commit/c8b8516e466c2bb7d2ae6a4b0b2e8e60b24b24a2
• https://github.com/timescale/timescaledb/security/advisories/GHSA-fh8v-663w-79w9Third Party Advisory
• https://docs.timescale.com/timescaledb/latest/overview/release-notes/Release Notes, Vendor Advisory
• https://github.com/timescale/timescaledb/commit/6275c2985927cfd4900b85cac5120227c8cb1f0c
• https://github.com/timescale/timescaledb/commit/c8b8516e466c2bb7d2ae6a4b0b2e8e60b24b24a2
• https://github.com/timescale/timescaledb/security/advisories/GHSA-fh8v-663w-79w9Third Party Advisory

Published

Mar 13, 2022

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-24122kernel/ucount.c in the Linux kernel 5.14 through 5.16.4, whe…7.8
• CVE-2022-24123MarkText through 0.16.3 does not sanitize the input of a mer…9
• CVE-2022-24124The query API in Casdoor before 1.13.1 has a SQL injection v…7.5
• CVE-2022-24125The matchmaking servers of Bandai Namco FromSoftware Dark So…8.8
• CVE-2022-24126A buffer overflow in the NRSessionSearchResult parser in Ban…9.8
• CVE-2022-24127A Stored Cross-Site Scripting (XSS) vulnerability was discov…5.4
• CVE-2022-24129The OIDC OP plugin before 3.0.4 for Shibboleth Identity Prov…8.2
• CVE-2022-2413The Slide Anything WordPress plugin before 2.3.47 does not p…5.4
• CVE-2022-24130xterm through Patch 370, when Sixel support is enabled, allo…5.5
• CVE-2022-24131DouPHP v1.6 Release 20220121 is affected by Cross Site Scrip…6.1
• CVE-2022-24132phpshe V1.8 is affected by a denial of service (DoS) attack …7.5
• CVE-2022-24135QingScan 1.3.0 is affected by Cross Site Scripting (XSS) vul…6.1