VULNERABILITY INTELLIGENCE

CVE-2024-12744

CVSS score8 HIGH
EPSS probability0.59%
CISA KEVNot currently listed
Published2024-12-24
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Description

A SQL injection in the Amazon Redshift JDBC Driver in v2.1.0.31 allows a user to gain escalated privileges via the getSchemas, getTables, or getColumns Metadata APIs. Users should upgrade to the driver version 2.1.0.32 or revert to driver version 2.1.0.30.

Weakness classification

  • ff89ba41-3aa1-4d27-914a-91399e9639e5: CWE-89

Primary references