VULNERABILITY INTELLIGENCE

CVE-2023-22626

CVSS score7.5 HIGH
EPSS probability0.84%
CISA KEVNot currently listed
Published2023-01-05
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Description

PgHero before 3.1.0 allows Information Disclosure via EXPLAIN because query results may be present in an error message. (Depending on database user privileges, this may only be information from the database, or may be information from file contents on the database server.)

Weakness classification

  • nvd@nist.gov: CWE-209
  • 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-209

Primary references