CVE-2024-32888 vulnerabilities

Vulnerabilities for packages: trino...

CVE-2024-32888

creationtimestamp| type| source ---|---|--- 2024-05-17 14:56:14+00:00| published-proof-of-concept| https://t.me/HackingInsights/604...

com.netflix.metacat:metacat-connector-redshift (>=1.3.0 <=1.3.1), com.trib3:db (>=1.19.1891 <=3.1.5004) +62 more potentially affected by CVE-2024-32888 via com.amazon.redshift:redshift-jdbc42 (>=2.0.0.3 <=2.1.0.26)

com.amazon.redshift:redshift-jdbc42 MAVEN version =2.0.0.3, =1.3.0, =1.19.1891, =0.1.15-alpha, =0.1.15-alpha, =0.1.15-alpha, =6.0.0-spark3.3, =0.6.0, =359, =3.20.0, =3.20.0, =0.1.5, =0.1.1, =2.59.0, =2.59.0, =3.0.0 and more Source cves: CVE-2024-32888 Source advisory: OSV:GHSA-X3WM-HFFR-CHWM...

CVE-2024-32888 Amazon JDBC Driver for Redshift SQL Injection via line comment generation

The Amazon JDBC Driver for Redshift is a Type 4 JDBC driver that provides database connectivity through the standard JDBC application program interfaces APIs available in the Java Platform, Enterprise Editions. Prior to version 2.1.0.28, SQL injection is possible when using the non-default...