CVE-2021-3393

score

<0.1

cvss

4.3

epss

1.2%

published

2021-04-01

kev added

—

first seen

2026-10-21

PostgreSQL before 13.2, 12.6, and 11.11 contains an information disclosure caused by error messages revealing column values when a user with UPDATE but not SELECT permission crafts specific queries, letting attackers obtain sensitive data, exploit requires crafted queries and specific permissions.