A flaw was found in PostgreSQL in versions before 13.2. This flaw allows a user with SELECT privilege on one column to craft a special query that returns all columns of the table. The highest threat from this vulnerability is to confidentiality.
CVSS Details
- CVSS 3.1 Base Score: 4.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | alpine-linux-upgrade-postgresqlalpine-linux-upgrade-postgresql13alpine-linux-upgrade-postgresql14alpine-linux-upgrade-postgresql15 | Jun 17, 2022 | Feb 23, 2021 | |
| Arch Linux | arch-linux-upgrade-latest | Jul 11, 2025 | Feb 23, 2021 | |
| Debian | debian-upgrade-postgresql-13 | Jul 30, 2024 | Feb 23, 2021 | |
| Gentoo Linux | gentoo-linux-upgrade-dev-db-postgresql | May 28, 2021 | Feb 23, 2021 | |
| Postgres | postgres-upgrade-13_2 | Feb 12, 2021 | Feb 12, 2021 | |
| Redhat_linux | no-fix-redhat-rpm-package | Jul 9, 2025 | Feb 23, 2021 | |
| Suse | — | suse-upgrade-libecpg6suse-upgrade-libpq5suse-upgrade-libpq5-32bitsuse-upgrade-postgresql13suse-upgrade-postgresql13-contribsuse-upgrade-postgresql13-develsuse-upgrade-postgresql13-docssuse-upgrade-postgresql13-llvmjitsuse-upgrade-postgresql13-llvmjit-develsuse-upgrade-postgresql13-plperlsuse-upgrade-postgresql13-plpythonsuse-upgrade-postgresql13-pltclsuse-upgrade-postgresql13-serversuse-upgrade-postgresql13-server-develsuse-upgrade-postgresql13-testsuse-upgrade-postgresql14suse-upgrade-postgresql14-contribsuse-upgrade-postgresql14-develsuse-upgrade-postgresql14-docssuse-upgrade-postgresql14-plperlsuse-upgrade-postgresql14-plpythonsuse-upgrade-postgresql14-pltclsuse-upgrade-postgresql14-serversuse-upgrade-postgresql14-server-devel | Feb 23, 2021 | Feb 22, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub