A flaw was found in PostgreSQL in versions before 13.2. This flaw allows a user with SELECT privilege on one column to craft a special query that returns all columns of the table. The highest threat from this vulnerability is to confidentiality.
CVSS Details
- CVSS 3.1 Base Score: 4.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade postgresqlUpgrade postgresql13Upgrade postgresql15Upgrade postgresql14 | Jun 17, 2022 | Feb 23, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Feb 23, 2021 |
| Debian | — | Upgrade postgresql-13 | Jul 30, 2024 | Feb 23, 2021 |
| Gentoo Linux | — | Upgrade dev-db/postgresql. | May 28, 2021 | Feb 23, 2021 |
| Postgres | — | Upgrade to PostgreSQL version 13.2 | Feb 12, 2021 | Feb 12, 2021 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 23, 2021 |
| Suse | — | Upgrade postgresql14-plperlUpgrade libpq5-32bitUpgrade postgresql13-llvmjitUpgrade postgresql13Upgrade postgresql13-plperlUpgrade postgresql13-contribUpgrade postgresql14-plpythonUpgrade libpq5Upgrade postgresql13-serverUpgrade postgresql13-testUpgrade postgresql13-develUpgrade postgresql14-docsUpgrade postgresql14-contribUpgrade postgresql14-develUpgrade postgresql14Upgrade postgresql13-plpythonUpgrade postgresql13-pltclUpgrade libecpg6Upgrade postgresql13-server-develUpgrade postgresql14-server-develUpgrade postgresql14-serverUpgrade postgresql14-pltclUpgrade postgresql13-llvmjit-develUpgrade postgresql13-docs | Feb 23, 2021 | Feb 22, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub