| Package | Affected versions | Patched versions |
|---|---|---|
| postgresql | ≥ 10.0, < 10.10≥ 11.0, < 11.5≥ 9.4.0, < 9.4.24≥ 9.5.0, < 9.5.19≥ 9.6.0, < 9.6.15 | 10.1011.59.4.249.5.199.6.15 |
A flaw was discovered in postgresql versions 9.4.x before 9.4.24, 9.5.x before 9.5.19, 9.6.x before 9.6.15, 10.x before 10.10 and 11.x before 11.5 where arbitrary SQL statements can be executed given a suitable SECURITY DEFINER function. An attacker, with EXECUTE permission on the function, can execute arbitrary SQL as the owner of the function.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free