VULNERABILITY INTELLIGENCE

CVE-2024-12745

CVSS score8 HIGH
EPSS probability0.53%
CISA KEVNot currently listed
Published2024-12-24
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Description

A SQL injection in the Amazon Redshift Python Connector v2.1.4 allows a user to gain escalated privileges via the get_schemas, get_tables, or get_columns Metadata APIs. Users are recommended to upgrade to the driver version 2.1.5 or revert to driver version 2.1.3.

Weakness classification

  • ff89ba41-3aa1-4d27-914a-91399e9639e5: CWE-89

Primary references