Related Vulnerabilities: CVE-2021-20229  

A security issue was found in PostgreSQL 13 before version 13.2. With a correctly crafted query, a user having SELECT privilege on just one column of a table would nonetheless be allowed to read all its columns.

Severity Medium

Remote Yes

Type Information disclosure

Description

A security issue was found in  PostgreSQL 13 before version 13.2. With a correctly crafted query, a user having SELECT privilege on just one column of a table would nonetheless be allowed to read all its columns.

AVG-1567 postgresql 13.1-3 Medium Vulnerable

https://github.com/postgres/postgres/commit/d525fbcfd167b28818301d0a2d3548ae6a744588