CVE-2024-12745

Published: 2024-12-24T17:15Z

Last Modified: 2024-12-26T15:15Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

A SQL injection in the Amazon Redshift Python Connector v2.1.4 allows a user to gain escalated privileges via the get_schemas, get_tables, or get_columns Metadata APIs. Users are recommended to upgrade to the driver version 2.1.5 or revert to driver version 2.1.3. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt