Improper Certificate Validation

Snowflake.data is vulnerable to Improper Certificate Validation. The vulnerability is due to not checking the Certificate Revocation List CRL when insecureMode is set to its default value of false. This allows an attacker with access to the private key of a correctly issued certificate to execute...

Command Injection

snowflake.data is vulnerable to Command Injection. The vulnerability is due to an improper URL filter, which allows an attacker to create a rouge SSO server which when a user connects to results in code injection...