The set_user extension module before 3.0.0 for PostgreSQL allows ProcessUtility_hook bypass via set_config.
NVD-CWE-noinfo