Lucene search
+L

2 matches found

OSV
OSV
•added 2023/06/08 8:29 p.m.•23 views

CVE-2023-34230 Snowflake Connector vulnerable to Command Injection

snowflake-connector-net, the Snowflake Connector for .NET, is vulnerable to command injection prior to version 2.0.18 via SSO URL authentication. In order to exploit the potential for command injection, an attacker would need to be successful in 1 establishing a malicious resource and 2 redirecti...

7.3CVSS8.9AI score
SaveExploits0References3
Mend
Mend
•added 2023/06/08 8:29 p.m.•1 views

CVE-2023-34230

snowflake-connector-net, the Snowflake Connector for .NET, is vulnerable to command injection prior to version 2.0.18 via SSO URL authentication. In order to exploit the potential for command injection, an attacker would need to be successful in 1 establishing a malicious resource and 2 redirecti...

8.8CVSS0.01431EPSS
SaveExploits0References4
Rows per page
Query Builder