Skip to content
OpenAdvisories

Product · DALIBO

PostgreSQL Anonymizer

24 known vulnerabilities.

2 results · Clear filters · Feed

  • Low 3.5

    PostgreSQL Anonymizer: Masked roles can read the statistics of masked columns in pg_stats

    PostgreSQL's optimized statistics on a table are visible as long as you have SELECT privilege on said table. A masked role can therefore read a limited subset of the data through the statistics view's histograms and mcvs. The vulnerability is resolved in Post…

  • Low 3.5

    PostgreSQL Anonymizer: Data-modifying CTEs bypass the read-only restriction of masked roles

    PostgreSQL Anonymizer contains a vulnerability that data-modifying CTEs to bypass the read-only restriction of masked roles. The problem is resolved in PostgreSQL Anonymizer 3.3.0 and later versions