CVE-2023-22847

MEDIUM 4.3CVE-2023-22847 · Published 07/03/2023 · updated 17/06/2026

In short

CVE-2023-22847 is a MEDIUM (CVSS 4.3) vulnerability affecting pg ivm (sraoss).
Chance of exploitation in the next 30 days (EPSS): 0.62%, higher than 49.8% of all vulnerabilities.
Fix: update to 1.5.1 or later.

Package	Affected versions	Patched versions
pg ivm sraoss	`< 1.5.1`	`1.5.1`

Description

Information disclosure vulnerability exists in pg_ivm versions prior to 1.5.1. An Incrementally Maintainable Materialized View (IMMV) created by pg_ivm may reflect rows with Row-Level Security that the owner of the IMMV should not have access to. As a result, information in tables protected by Row-Level Security may be retrieved by a user who is not authorized to access it.

References

sraoss/pg_ivm · Product
sraoss/pg_ivm release v1.5.1 · Release Notes
jvn.jp/en/jp/JVN19872280 · Third Party Advisory

More vulnerabilities in pg ivm

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free