PT-2022-4318

Name of the Vulnerable Software and Affected Versions PostgreSQL JDBC Driver versions prior to 42.2.26 PostgreSQL JDBC Driver versions prior to 42.4.1 Description The PGJDBC implementation of the java.sql.ResultRow.refreshRow method is not performing escaping of column names, allowing a malicious...

CVE-2022-31197: Improper Neutralization of Special Elements used in an SQL Command

PostgreSQL JDBC Driver PgJDBC for short allows Java programs to connect to a PostgreSQL database using standard, database independent Java code. The PGJDBC implementation of the java.sql.ResultRow.refreshRow method is not performing escaping of column names so a malicious column name that contain...