CVE-2023-22847

Information disclosure vulnerability exists in pg_ivm versions prior to 1.5.1. An Incrementally Maintainable Materialized View (IMMV) created by pg_ivm may reflect rows with Row-Level Security that the owner of the IMMV should not have access to. As a result, information in tables protected by Row-Level Security may be retrieved by a user who is not authorized to access it.

• CWE-200

• https://github.com/sraoss/pg_ivmProduct
• https://github.com/sraoss/pg_ivm/releases/tag/v1.5.1Release Notes
• https://jvn.jp/en/jp/JVN19872280/Third Party Advisory
• https://github.com/sraoss/pg_ivmProduct
• https://github.com/sraoss/pg_ivm/releases/tag/v1.5.1Release Notes
• https://jvn.jp/en/jp/JVN19872280/Third Party Advisory

Published

Mar 7, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-22841Unquoted search path in the software installer for the Syste…7.3
• CVE-2023-22842On BIG-IP versions 16.1.x before 16.1.3.3, 15.1.x before 15.…7.5
• CVE-2023-22843An authenticated attacker with administrative access to the …4.8
• CVE-2023-22844An authentication bypass vulnerability exists in the request…9.8
• CVE-2023-22845An out-of-bounds read vulnerability exists in the TGAInput::…7.5
• CVE-2023-22846 Datakit CrossCadWare_x64.dll contains an out-of-bound…5.5
• CVE-2023-22848Improper access control in some Intel(R) Thunderbolt(TM) DCH…5.5
• CVE-2023-22849An improper neutralization of input during web page generati…6.1
• CVE-2023-2285The WP Activity Log Premium plugin for WordPress is vulnerab…4.3
• CVE-2023-22850Tiki before 24.1, when the Spreadsheets feature is enabled, …8.8
• CVE-2023-22851Tiki before 24.2 allows lib/importer/tikiimporter_blog_wordp…7.2
• CVE-2023-22852Tiki through 25.0 allows CSRF attacks that are related to ti…6.5