CVSS 3.1
7.7 highCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:HCVE-2020-13692
High (7.7). EPSS 4.1% chance of exploitation in the next 30 days. Fixed in org.postgresql:postgresql 42.2.13.
PostgreSQL JDBC Driver (aka PgJDBC) before 42.2.13 allows XXE.
Severity
- EPSS
- 4.1% chance of exploitation in the next 30 days; higher than 90% of CVEs (scores of 2026-10-31)
- CWE
- CWE-611
- Published
- Modified
- Record from
- the NVD, synced
Affected
- debian:debian_linux
- fedoraproject:fedora
- netapp:steelstore_cloud_integrated_storage
- postgresql:postgresql_jdbc_driver
- quarkus:quarkus
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-88cc-g835-76rp | Maven | org.postgresql:postgresql | >=9.4.1212.jre6 <42.2.13 | 42.2.13 |
References
- https://github.com/pgjdbc/pgjdbc/commit/14b62aca4764d496813f55a43d050b017e01eb65
- https://jdbc.postgresql.org/documentation/changelog.html#version_42.2.13
- https://lists.apache.org/thread.html/r00bcc6b2da972e0d6332a4ebc7807e17305d8b8e7fb2ae63d2a3cbfb%40%3Ccommits.camel.apache.org%3E
- https://lists.apache.org/thread.html/r01ae1b3d981cf2e563e9b5b0a6ea54fb3cac8e9a0512ee5269e3420e%40%3Ccommits.camel.apache.org%3E
- https://lists.apache.org/thread.html/r0478a1aa9ae0dbd79d8f7b38d0d93fa933ac232e2b430b6f31a103c0%40%3Ccommits.camel.apache.org%3E