postgresql: PostgreSQL optimizer statistics can expose sampled data within a view, partition, or child table

An access control bypass flaw has been discovered in PostgreSQL. The PostgreSQL optimizer statistics allow a user to read sampled data within a view that the user cannot access. Separately, statistics allow a user to read sampled data that a row security policy intended to hide...

CVE-2024-40749

The Joomla! content management system is vulnerable to an Improper Access Control flaw in multiple core views . This vulnerability, identified as a Read ACL violation , allows unauthorized access to protected views. The issue affects several versions, including Joomla! 3.x prior to 3.10.20 , 4.x ...