CVE-2024-1597

The pgjdbc PostgreSQL JDBC Driver contains a critical SQL injection vulnerability when the non-default connection property PreferQueryMode=SIMPLE is enabled. The flaw allows an attacker to bypass parameterized query protections by constructing a matching string payload, provided a numeric placeho...