CVE-2020-13692GHSA-88CC-G835-76RPBIT-POSTGRESQL-JDBC-DRIVER-2020-13692
PostgreSQL JDBC Driver (aka PgJDBC) before 42.2.13 allows XXE.
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in 42.2.13
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
PostgreSQL JDBC Driver (aka PgJDBC) before 42.2.13 allows XXE.
Timeline
- CVE published
- Record last updated
Affected versions
- n/a n/a
Version range not reported
- org.postgresql:postgresqlMaven
From 9.4.1212.jre6 · fixed in 42.2.13
References 14
GitHub · pgjdbc/pgjdbc
jdbc.postgresql.org
security.netapp.com
lists.apache.org
- thread.html/r00bcc6b2da972e0d6332a4ebc7807e17305d8b8e7fb2ae63d2a3cbfb@<commits.camel.apache.org>
- thread.html/r7f6d019839df17646ffd0046a99146cacf40492a6c92078f65fd32e0@<commits.camel.apache.org>
- thread.html/r1aae77706aab7d89b4fe19be468fc3c73e9cc84ff79cc2c3bd07c05a@<commits.camel.apache.org>
- thread.html/r0478a1aa9ae0dbd79d8f7b38d0d93fa933ac232e2b430b6f31a103c0@<commits.camel.apache.org>
- thread.html/r01ae1b3d981cf2e563e9b5b0a6ea54fb3cac8e9a0512ee5269e3420e@<commits.camel.apache.org>
- thread.html/r631f967db6260d6178740a3314a35d9421facd8212e62320275fa78e@<commits.camel.apache.org>
- thread.html/rfe363bf3a46d440ad57fd05c0e313025c7218364bbdc5fd8622ea7ae@<commits.camel.apache.org>
- thread.html/r4bdea189c9991aae7a929d28f575ec46e49ed3d68fa5235825f38a4f@<notifications.netbeans.apache.org>
- thread.html/rb89f92aba44f524d5c270e0c44ca7aec4704691c37fe106cf73ec977@<notifications.netbeans.apache.org>