Regular Expression Denial Of Service (ReDoS)

2022-11-1001:49:50

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

snowflake-connector-python

sql queries

validation

EPSS

0.001

Percentile

36.8%

JSON

snowflake-connector-python is vulnerable to regular expression denial of service. The vulnerability is due to the get_file_transfer_type function in cursor.py which does not properly validate the SQL queries, allowing an attacker to crash the application by providing a malicious input.