The vulnerability of the CopyFromExternalStageToSnowflakeOperator() function in the Apache Airflow data integration with cloud platform providers Snowflake allows a hacker to execute arbitrary code.

The vulnerability of the CopyFromExternalStageToSnowflakeOperator function in the Apache Airflow integration with cloud data platforms involves improper elimination of special elements. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Failure to Sanitize Special Elements into a Different Plane (Special Element Injection)

Overview apache-airflow-providers-snowflake is a Provider package apache-airflow-providers-snowflake for Apache Airflow Affected versions of this package are vulnerable to Failure to Sanitize Special Elements into a Different Plane Special Element Injection in the...