Description
A flaw was found in postgresql. Using an INSERT ... ON CONFLICT ... DO UPDATE command on a purpose-crafted table, an authenticated database user could read arbitrary bytes of server memory. The highest threat from this vulnerability is to data confidentiality.
Remediation
References
Related Vulnerabilities
WordPress Credentials Management Errors Vulnerability (CVE-2009-2762)
Craft CMS Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2023-30179)
WordPress Plugin Answer My Question Cross-Site Scripting (1.3)
WordPress Plugin Ultimate WordPress Auction Cross-Site Request Forgery (1.0.0)
WebLogic Improper Access Control Vulnerability (CVE-2026-60702)