CVE-2024-12745
CVE-2024-12745 · SQL Injection in the Amazon Redshift Python Connector affecting v2.1.4
This page contains facts from public vulnerability sources. Check the original advisory before updating.
A SQL injection in the Amazon Redshift Python Connector v2.1.4 allows a user to gain escalated privileges via the get_schemas, get_tables, or get_columns Metadata APIs. Users are recommended to upgrade to the driver version 2.1.5 or revert to driver version 2.1.3.
CVSS 8.6 · High · EPSS 0.5% · Fix available
- Published
- Updated
Stack: python
Affected products and versions
amazon redshift python connector
- Versions
- 2.1.4: Affected
No fix published
redshift-connector PyPI
- Versions
- 2.1.4
- Affected ranges
- ECOSYSTEM: ≥ 2.1.4, < 2.1.5
Update to 2.1.5