1 matches found
Important: postgresql16
Issue Overview: Incomplete tracking in PostgreSQL of tables with row security allows a reused query to view or change different rows from those intended. CVE-2023-2455 and CVE-2016-2193 fixed most interaction between row security and user ID changes. They missed cases where a subquery, WITH query...
8.8CVSS8.8AI score0.04422EPSS
SaveExploits1
20