CVE-2022-41828

Published September 29th, 2022

View on NVD ↗

CVSS v3

8.1

HIGH

CVSS v2

N/A

Affected

PROJECT

Description

In Amazon AWS Redshift JDBC Driver (aka amazon-redshift-jdbc-driver or redshift-jdbc42) before 2.1.0.8, the Object Factory does not check the class type when instantiating an object from a class name.

aws/amazon-redshift-jdbc-driver

Redshift JDBC Driver. It supports JDBC 4.2 specification.

GitHub