GCVE-110-MAGEIA-2023-261

Advisory Published

Vulnetix · Advisory published September 11, 2023

Extension script @substitutions@ within quoting allow SQL injection. (CVE-2023-39417) MERGE fails to enforce UPDATE or SELECT row security policies. (CVE-2023-39418)

Download JSON Open in Console

Affected Products

Vendor	Product	Versions	Platforms
Mageia	postgresql13	13.12-1.mga8 (unaffected), 0 (affected)	—
Mageia	postgresql13	0 (affected), 13.12-1.mga9 (unaffected)	—
Mageia	postgresql11	0 (affected), 11.21-1.mga8 (unaffected)	—
Mageia	postgresql15	15.4-1.mga9 (unaffected), 0 (affected)	—

References

Updated postgresql packages fix security vulnerability

advisory

Updated postgresql packages fix security vulnerability

issue

Updated postgresql packages fix security vulnerability

issue

Browse GCVE Records

73,738 records in the GCVE database · Updated July 19, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON