Description

PostgreSQL Anonymizer v2.0 and v2.1 contain a vulnerability that allows a masked user to bypass the masking rules defined on a table and read the original data using a database cursor or the --insert option of pg_dump. This problem occurs only when dynamic masking is enabled, which is not the default setting. The problem is resolved in version 2.2.1

INFO

Published Date :

2025-06-04T21:34:47.358Z

Last Modified :

2025-06-05T18:10:03.492Z

Source :

PostgreSQL
AFFECTED PRODUCTS

The following products are affected by CVE-2025-5690 vulnerability.

Vendors Products
Dalibo
  • Postgresql Anonymizer
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2025-5690.

URL Resource
https://gitlab.com/dalibo/postgresql_anonymizer/-/issues/531 cve-icon cve-icon
Login to claim this CVE

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact