RedShift JDBC Driver < 2.1.0.32 (CVE-2024-12744)

The Amazon Redshift JDBC Driver, version 2.1.0.31, is affected by CVE-2024-12744, a SQL injection issue when utilizing the getschemas, gettables, or getcolumns Metadata APIs. This issue has been addressed in driver version 2.1.0.32. We recommend customers upgrade to the driver version 2.1.0.32 or...

io.github.josephlbarnett:db (>=3.2.340 <=3.2.379), us.fatehi:schemacrawler-cassandra (>=16.23.1 <=16.23.2) +10 more potentially affected by CVE-2024-12744 via com.amazon.redshift:redshift-jdbc42 (=2.1.0.31)

com.amazon.redshift:redshift-jdbc42 MAVEN version =2.1.0.31 is affected by a known vulnerability. The following packages have a transitive dependency on com.amazon.redshift:redshift-jdbc42 and may be impacted: - io.github.josephlbarnett:db =3.2.340, =16.23.1, =16.23.1, =16.23.1, =16.23.1, =16.23....

CVE-2024-12744

creationtimestamp| type| source ---|---|--- 2024-12-24 16:24:03+00:00| seen| https://infosec.exchange/users/cve/statuses/113708724559281732 2024-12-24 17:15:27+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3le2x36pzu32l 2024-12-24 19:25:28+00:00| seen|...