All vulnerabilities

Servers and applications

CVE-2021-20229

A flaw was found in PostgreSQL in versions before 13.2. This flaw allows a user with SELECT privilege on one column to craft a special query that returns all columns of the table. The highest threat from this vulnerability is to confidentiality.

Severity
Medium 4.3
Published
23 Feb 2021
Last changed
17 Jun 2026
Added to UpHeron
16 Oct 2026
Fixed in
13.2
Sources
NVD

Affected software

SoftwareAffected versions
PostgreSQLServers and applications · cpe:a:postgresql:postgresql
  • From 13.0 before 13.2

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2021-20229
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2021-20229