CVE-2021-20229CWE-863

A flaw was found in PostgreSQL in versions before 13.2

published February 23, 2021

CVSS
—
EPSS
1%
Percentile
73.5
In the wild
Unconfirmed
What it is

A flaw was found in PostgreSQL in versions before 13.2. This flaw allows a user with SELECT privilege on one column to craft a special query that returns all columns of the table. The highest threat from this vulnerability is to confidentiality.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01466 · 73.5th percentile
Weakness
CWE-863 · Incorrect Authorization
Published
2021-02-23T17:40Z
EPSS history
Timeline
  • 23 FEB 17:40Z
    A flaw was found in PostgreSQL in versions before 13.2
    cvelistv5