CVE-2024-12744

Published December 24th, 2024

View on NVD ↗

CVSS v3

HIGH

CVSS v2

N/A

Affected

PROJECT

Description

A SQL injection in the Amazon Redshift JDBC Driver in v2.1.0.31 allows a user to gain escalated privileges via the getSchemas, getTables, or getColumns Metadata APIs. Users should upgrade to the driver version 2.1.0.32 or revert to driver version 2.1.0.30.

aws/amazon-redshift-jdbc-driver

Redshift JDBC Driver. It supports JDBC 4.2 specification.

GitHub