PostgreSQL
An advanced open-source relational database.
Where It Sits
The small stack marks its layer. Beside it, each related technology links to its own page.
- App
- Framework
- Web Server
- Runtime
- Containers
- OS
- Hypervisor
- Firmware
- Hardware
- DataPostgreSQL
About
PostgreSQL is a capable open-source relational database used by Django, GitLab and many others. It listens on port 5432. Like any database, it holds the records an attacker wants.
How to Spot It
These are signs that a system runs PostgreSQL, seen from outside without signing in, such as a response header, a cookie, a path or a default port. They help you find where it runs across your own estate. A version shown to the world also tells anyone scanning which flaws might apply, so it is worth hiding.
- Default port
5432 (PostgreSQL)
If It Has a Flaw
A flaw or weak account exposes the stored data directly. Most real attacks reach it through SQL injection in the application, not through a flaw in the database itself.
Rivals
Rivals do the same job on the same layer, so a system usually runs one of them in any one place. A flaw in a rival does not reach PostgreSQL.
Stacks and Code
PostgreSQL is part of the common stacks below, and each stack's page shows who runs every layer. Its code arrives from the sources listed, and each source's page says how bad code could get in through it.
- In Common Stacks
- Confluence, Java on TomcatA Django AppA Rails App on Puma
- Its Code Comes From
- OS Packages