2 matches found
CLSA-2025-1764868292 Fix CVE(s): CVE-2025-1094
SECURITY UPDATE: improper neutralization of quoting syntax in libpq functions allows SQL injection via psql in certain usage patterns - debian/patches/CVE-2025-1094.patch: Fix handling of invalidly encoded data in escaping functions - CVE-2025-1094...
8.1CVSS5.8AI score0.9003EPSS
SaveExploits10References1
postgresql: PostgreSQL quoting APIs miss neutralizing quoting syntax in text that fails encoding validation
A flaw was found in PostgreSQL. Due to improper neutralization of quoting syntax, affected versions potentially allow a database input provider to achieve SQL injection in certain usage patterns. Specifically, SQL injection requires the application to use the affected function's result to constru...
8.1CVSS7.3AI score0.9003EPSS
SaveExploits10References7
20