Executive brief
Snowflake JDBC vulnerable to command injection via SSO URL authentication
Affected products
- Maven net.snowflake:snowflake-jdbc
Junglewise Threat Intelligence
CVE-2023-30535: Snowflake JDBC vulnerable to command injection via SSO URL authentication
CVE-2023-30535 · Severity: low · CVSS 3.1 · Published 2023-04-14
Technologies: net.snowflake:snowflake-jdbc (Maven). Vendors: Maven.
Related threats
- Snowflake JDBC Driver is Vulnerable to Uncontrolled Resource Consumption through SdkProxyRoutePlanner
- Snowflake JDBC Driver client-side encryption key in DEBUG logs
- Snowflake JDBC uses insecure temporary credential cache file permissions
- Snowflake JDBC allows an untrusted search path on Windows
- Snowflake JDBC Security Advisory