← Database

CVE-2022-41828

HIGH CVSS: 8.1 Published: 2022-09-29 Modified: 2026-06-17

Description

In Amazon AWS Redshift JDBC Driver (aka amazon-redshift-jdbc-driver or redshift-jdbc42) before 2.1.0.8, the Object Factory does not check the class type when instantiating an object from a class name.

Affected Platforms

Amazon Amazon Web Services Redshift Java Database Connectivity Driver

Weakness Type

CWE-704, CWE-704

References