Snowflake Connector vulnerable to Command Injection

CVE-2023-34230

What is CVE-2023-34230?

The Snowflake Connector for .NET is susceptible to command injection vulnerabilities prior to version 2.0.18, specifically through exploitation via Single Sign-On (SSO) URL authentication. An attacker could create a malicious resource and deceive users into utilizing this compromised resource. By setting up a publicly accessible server that can respond to an SSO URL with harmful payloads, the attacker can lead users to visit this crafted connection URL. Upon visiting, the users' systems may inadvertently execute the attack payload, posing severe risks including unauthorized remote code execution. To mitigate this vulnerability, organizations are advised to implement URL whitelisting and utilize established anti-phishing measures.

References