Lucene search
Veracode Vulnerability DatabaseVERACODE:36591HistoryAug 03, 2022 - 10:36 p.m.
SQL Injection
2022-08-0322:36:24
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
43
postgresql
jdbc driver
sql injection
remote attacker
malicious code
EPSS
0.001
Percentile
47.0%
PostgreSQL JDBC Driver is vulnerable to SQL Injection. The vulnerability exists in java.sql.ResultRow.RefreshRow function because it’s not properly escaping column names which allows a remote attacker to inject and execute malicious sql code into the system.
References
github.com/pgjdbc/pgjdbc/commit/739e599d52ad80f8dcd6efedc6157859b1a9d637
github.com/pgjdbc/pgjdbc/commit/b5ee575b7d6e0918a58fe533f6c50b0c7e9f73c0
github.com/pgjdbc/pgjdbc/security/advisories/GHSA-r38f-c4h4-hqq2
lists.debian.org/debian-lts-announce/2022/10/msg00009.html
lists.fedoraproject.org/archives/list/[email protected]/message/I6WHUADTZBBQLVHO4YG4XCWDGWBT4LRP/
lists.fedoraproject.org/archives/list/[email protected]/message/UTFE6SV33P5YYU2GNTQZQKQRVR3GYE4S/
Related
openvas
openvas
Debian: Security Advisory (DLA-3140-1)
2022-10-09 00:00:00
Fedora: Security Advisory for postgresql-jdbc (FEDORA-2022-cdeabe1bc0)
2022-10-05 00:00:00
Fedora: Security Advisory for postgresql-jdbc (FEDORA-2022-d7d49b2fac)
2022-10-05 00:00:00
debian
debian
[SECURITY] [DLA 3140-1] libpgjava security update
2022-10-08 01:00:06
suse
suse
Security update for postgresql-jdbc (important)
2022-10-18 00:00:00
Security update for postgresql-jdbc (important)
2022-10-06 00:00:00
oraclelinux
oraclelinux
postgresql-jdbc security update
2023-01-24 00:00:00
nessus
nessus
Fedora 35 : postgresql-jdbc (2022-cdeabe1bc0)
2022-12-23 00:00:00
Debian DLA-3140-1 : libpgjava - LTS security update
2022-10-08 00:00:00
SUSE SLES15 Security Update : postgresql-jdbc (SUSE-SU-2022:3613-1)
2022-10-19 00:00:00
fedora
fedora
[SECURITY] Fedora 35 Update: postgresql-jdbc-42.2.26-1.fc35
2022-10-05 01:04:52
[SECURITY] Fedora 36 Update: postgresql-jdbc-42.3.1-4.fc36
2022-10-05 01:01:52
github
github
osv
osv
Moderate: postgresql-jdbc security update
2023-01-23 14:30:09
libpgjava - security update
2022-10-07 00:00:00
BIT-postgresql-jdbc-driver-2022-31197
2024-03-06 11:02:11
almalinux
almalinux
Moderate: postgresql-jdbc security update
2023-01-23 00:00:00
alpinelinux
alpinelinux
CVE-2022-31197
2022-08-03 19:15:08
redhatcve
redhatcve
CVE-2022-31197
2022-09-23 18:18:48
ibm
ibm
wolfi
wolfi
CVE-2022-31197 vulnerabilities
2024-10-05 21:16:12
cve
cve
CVE-2022-31197
2022-08-03 19:15:08
cvelist
cvelist
nvd
nvd
CVE-2022-31197
2022-08-03 19:15:08
cgr
cgr
CVE-2022-31197 vulnerabilities
2024-05-19 03:07:16
debiancve
debiancve
CVE-2022-31197
2022-08-03 19:15:08
prion
prion
Sql injection
2022-08-03 19:15:00
rocky
rocky
postgresql-jdbc security update
2023-01-23 14:30:09
redhat
redhat
freebsd
freebsd
puppetdb -- Potential SQL injection
2022-08-03 00:00:00
ubuntucve
ubuntucve
CVE-2022-31197
2022-08-03 00:00:00
hp
hp
HP Device Manager Vulnerability Update (5.0.12)
2024-01-26 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - July 2023
2023-07-18 00:00:00