UpHeron
All vulnerabilities

Servers and applications

CVE-2021-3393

An information leak was discovered in postgresql in versions before 13.2, before 12.6 and before 11.11. A user having UPDATE permission but not SELECT permission to a particular column could craft queries which, under some circumstances, might disclose values from that column in error messages. An attacker could use this flaw to obtain information stored in a column they are allowed to write but…

Severity
Medium 4.3
Published
1 Apr 2021
Last changed
17 Jun 2026
Added to UpHeron
16 Oct 2026
Fixed in
11.11, 12.6, 13.2
Sources
NVD

Affected software

SoftwareAffected versions
PostgreSQLServers and applications · cpe:a:postgresql:postgresql
  • Every version before 11.11
  • From 12.0 before 12.6
  • From 13.0 before 13.2

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2021-3393
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2021-3393