CVE-2023-39418 — Postgresql: merge fails to enforce update or select row security policies
A vulnerability was found in PostgreSQL with the use of the MERGE command, which fails to test new rows against row security policies defined for UPDATE and SELECT. If UPDATE an…
Published: 2023-08-11 · CVSS: 3.1 · CVSS 3.1
A vulnerability was found in PostgreSQL with the use of the MERGE command, which fails to test new rows against row security policies defined for UPDATE and SELECT. If UPDATE and SELECT policies forbid some rows that INSERT policies do not forbid, a user could store such rows.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7