Vulnerability Details CVE-2024-12745
A SQL injection in the Amazon Redshift Python Connector v2.1.4 allows a user to gain escalated privileges via the get_schemas, get_tables, or get_columns Metadata APIs. Users are recommended to upgrade to the driver version 2.1.5 or revert to driver version 2.1.3.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 36.3%
CVSS Severity
CVSS v3 Score 8.0
References
Products affected by CVE-2024-12745
-
cpe:2.3:a:amazon:redshift_connector:2.1.4