VDB
Sign up
HIGH7.7

GHSA-88cc-g835-76rp

Improper Restriction of XML External Entity Reference

Quick fix

GHSA-88cc-g835-76rp — org.postgresql:postgresql: upgrade to the fixed version with the command below.

# pom.xml: bump <version>42.2.13</version> for org.postgresql:postgresql

Details

PostgreSQL JDBC Driver (aka PgJDBC) before 42.2.13 allows XXE.

Are you affected?

Enter the version of the package you're using.

Affected packages

Maven/org.postgresql:postgresql
Introduced in: 9.4.1212.jre6Fixed in: 42.2.13
Fix# pom.xml: bump <version>42.2.13</version> for org.postgresql:postgresql

References