| Package | Affected versions | Patched versions |
|---|---|---|
| postgresql | ≥ 10.0, < 10.6≥ 11.0, < 11.1 | 10.611.1 |
postgresql before versions 11.1, 10.6 is vulnerable to a to SQL injection in pg_upgrade and pg_dump via CREATE TRIGGER ... REFERENCING. Using a purpose-crafted trigger definition, an attacker can cause arbitrary SQL statements to run, with superuser privileges.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free