Amazon Redshift Driver SQL Injection (Alert)
Jan 1, 2025

Amazon Redshift JDBC Driver security vulnerability CVE-2024-12744: SQL injection risk in metadata APIs affecting database operations.
Summary
SQL injection vulnerability via metadata APIs
Affects database schema, table, and column operations
Update required
CVSS Score: 8.6 (HIGH)
Attack Complexity: Low
Impact: Widespread
Urgency: Update Required
Affected Systems
Amazon Redshift JDBC Driver
Database metadata operations
Schema/table management interfaces
Vulnerable Version
2.1.0.31
Fixed Version
2.1.0.32
Stay Protected
@SkaSecurity helps track vulnerable dependencies automatically. Start a free trial
Reference https://github.com/advisories/GHSA-8596-2jgr-ppj7
#AWSsecurity #DatabaseSecurity #CyberSecurity #RedshiftJDBC #SQLinjection #CVE202412744 #InfoSec #AppSec
Secure your code with lightning-fast, affordable SCA, comprehensive SBOM, and GitHub Checks, all seamlessly integrated with your workflow
West Jordan, Utah