| Package | Affected versions | Patched versions |
|---|---|---|
| postgresql | ≥ 9.1.0, < 9.1.15≥ 9.2.0, < 9.2.10≥ 9.3.0, < 9.3.6≥ 9.4.0, < 9.4.1< 9.0.19 | 9.1.159.2.109.3.69.4.19.0.19 |
PostgreSQL before 9.0.19, 9.1.x before 9.1.15, 9.2.x before 9.2.10, 9.3.x before 9.3.6, and 9.4.x before 9.4.1 allows remote authenticated users to obtain sensitive column values by triggering constraint violation and then reading the error message.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free