A bug in MySQL left AWS Web Application Firewall customers vulnerable to SQL injection attacks. AWS fixed the flaw on October 1. The scientific notation bug dates back to 2013. The issue also affects MariaDB.
Information https://portswigger.net/daily-swig/historic-scientific-notation-bug-foils-waf-defenses