SWS Vulnerability Watch

Back to findings

CVE-2024-1597 in PostgreSQL JDBC 42.7.*

org.postgresql:postgresql vulnerable to SQL Injection via line comment generation

Severity
Critical 10.0
Exploitation
5% chance of exploit
in the next 30 days
Fix
Update to 42.7.2
Where
Test dependency
How it matched
Approximate – version line, checked against its .0 release
Also known as
BIT-postgresql-jdbc-driver-2024-1597, GHSA-24rp-q3w6-vc56
First seen
2026-11-05 01:13:58 UTC
Source
https://osv.dev/vulnerability/GHSA-24rp-q3w6-vc56