PT-2025-23864 · Unknown+1 · Postgresql Anonymizer+1

Published 2025-06-04 · Updated 2025-06-05 · CVE-2025-5690

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions PostgreSQL Anonymizer versions 2.0 through 2.1

Description The issue allows a masked user to bypass the masking rules defined on a table and read the original data using a database cursor or the --insert option of pg dump. This problem occurs only when dynamic masking is enabled, which is not the default setting.

Recommendations For versions 2.0 and 2.1, update to version 2.2.1 to resolve the issue. As a temporary workaround, consider disabling dynamic masking until the update is applied. Restrict access to the database cursor and the --insert option of pg dump to minimize the risk of exploitation.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2025-5690

Affected Products

Postgresql Anonymizer

Pgpdump

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-5690 · Security Note
• https://osv.dev/vulnerability/CVE-2025-5690 · Vendor Advisory
• https://t.me/cvetracker/25453 · Telegram Post
• https://gitlab.com/dalibo/postgresql_anonymizer/-/issues/531 · Note
• https://twitter.com/CVEnew/status/1930381644403487134 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1930492538990829926 · Twitter Post