Junglewise Threat Intelligence

CVE-2023-34230: Snowflake Connector .Net Command Injection

CVE-2023-34230 · Severity: low · CVSS 3.1 · Published 2023-06-09

Technologies: Snowflake.Data (NuGet). Vendors: NuGet.

Executive brief

Snowflake Connector .Net Command Injection

Affected products

NuGet Snowflake.Data

Related threats

Snowflake Connector for .NET has race condition when checking access to Easy Logging configuration file
Snowflake.Data has weak temporary files permissions
Snowflake Connector .NET does not properly check the Certificate Revocation List (CRL)