| Package | Affected versions | Patched versions |
|---|---|---|
| postgresql | ≥ 10.0, < 10.15≥ 11.0, < 11.10≥ 12.0, < 12.5≥ 13.0, < 13.1≥ 9.6.0, < 9.6.20< 9.5.24 | 10.1511.1012.513.19.6.209.5.24 |
A flaw was found in PostgreSQL versions before 13.1, before 12.5, before 11.10, before 10.15, before 9.6.20 and before 9.5.24. An attacker having permission to create non-temporary objects in at least one schema can execute arbitrary SQL functions under the identity of a superuser. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free