The security advisory for Red Hat Integration Camel K 1.10.7 addresses a SQL injection vulnerability in the PostgreSQL JDBC Driver (pgjdbc) identified as CVE-2024-1597. The vulnerability arises when the driver uses the PreferQueryMode=SIMPLE setting, allowing an attacker to inject SQL commands. Red Hat has released Camel K 1.10.7 to fix this issue. The advisory does not provide a CVSS score but classifies the impact as important. Users are advised to apply this update following the installation of all prior relevant errata.

An attacker can exploit the PostgreSQL JDBC Driver's handling of PreferQueryMode=SIMPLE to inject SQL commands, potentially compromising database integrity or confidentiality. The advisory rates this vulnerability as important, indicating a significant security risk if left unpatched. No known exploits in the wild have been reported at the time of the advisory.

Red Hat has released Camel K 1.10.7 which includes the fix for CVE-2024-1597. Users should update to this version after applying all previously released relevant errata. Detailed update instructions are available from Red Hat's official documentation. No additional mitigation steps are indicated by the vendor advisory.