CVE-2022-21724
1 advisory.
Maven/org.postgresql:postgresql CVE-2022-21724: high 7
pgjdbc Does Not Check Class Instantiation when providing Plugin Classes
Action: Upgrade org.postgresql:postgresql to 42.2.25 (42.2.x) or 42.3.2 (42.3.x) or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 9.4.1208 | 42.2.25 | - |
| 42.3.0 | 42.3.2 | - |
Fixed versions
| 42.2.25 | 42.3.2 |
Sources
- osv: GHSA-v7wg-cpwc-24m4
- https://github.com/pgjdbc/pgjdbc/security/advisories/GHSA-v7wg-cpwc-24m4
- https://nvd.nist.gov/vuln/detail/CVE-2022-21724
- https://github.com/pgjdbc/pgjdbc/commit/f4d0ed69c0b3aae8531d83d6af4c57f22312c813
- https://github.com/pgjdbc/pgjdbc
- https://lists.debian.org/debian-lts-announce/2022/05/msg00027.html
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BVEO7BEFXPBVHSPYL3YKQWZI6DYXQLFS
- https://security.netapp.com/advisory/ntap-20220311-0005
- https://www.debian.org/security/2022/dsa-5196
CVE-2022-21724 · published · modified · JSON