CVE-2024-26164: Microsoft Django Backend for SQL Server Remote Code Execution Vulnerability

How could an attacker exploit the vulnerability?

An attacker could use the unsanitized parameter into a SQL query to trigger SQL Injection.