p PatchFirst

CVE-2021-20229

CVE-2021-20229

This page contains facts from public vulnerability sources. Check the original advisory before updating.

A flaw was found in PostgreSQL in versions before 13.2. This flaw allows a user with SELECT privilege on one column to craft a special query that returns all columns of the table. The highest threat from this vulnerability is to confidentiality.

CVSS 4.3 · Medium · EPSS 1.5% · Fix available

Published
Updated

Stack: system · database

Affected products and versions

  • postgresql

    Versions
    • postgresql 13.2, postgresql 12.6, postgresql 11.11, postgresql 10.16, postgresql 9.6.21, postgresql 9.5.25: Affected

    No fix published

  • postgresql-13 Debian:11

    Affected ranges
    • ECOSYSTEM: < 13.2-1

    Update to 13.2-1

Original sources

Check your server →