Zurück zur CVE-Übersicht
CVE-2026-105617
MEDIUM(6.5)CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Risk Signal Score16/100 — NIEDRIG
- CVSS 6.5 — Mittel
Erwähnungen (letzte 60 Tage)
Artikel
EPSS-Score
0.2%
Exploit-Wahrscheinlichkeit (30 Tage)
CVSS Score
6.5
Technische Schwere
Beschreibung
PostgreSQL Anonymizer doesn't invalidate plans prepared after a rule was added or a role changed. Users using such plans can still see the unmasked data until the end of the session. The problem is resolved in PostgreSQL Anonymizer 3.3.0 and later versions.
Betroffene Produkte
- cpe:2.3:a:dalibo:postgresql_anonymizer:*:*:*:*:*:postgresql:*:*