← Back

CVE-2025-50213

nvd nist
Published: Jun 24, 2025Modified: Jun 17, 2026

JSON object

Loading...
9.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) vulnerability in Apache Airflow Providers Snowflake. This issue affects Apache Airflow Providers Snowflake: before 6.4.0. Sanitation of table and stage parameters were added in CopyFromExternalStageToSnowflakeOperator to prevent SQL injection Users are recommended to upgrade to version 6.4.0, which fixes the issue.

Affected (1)

Apache
1 product
Apache Airflow Providers Snowflake
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Apache Airflow Providers Snowflake
Before 6.4.0

Related CWEs

CWE-75
Failure to Sanitize Special Elements into a Different Plane (Special Element Injection)
The product does not adequately filter user-controlled input for special elements with control implications.

References (2)

Source: security@apache.org
Issue TrackingPatch
Source: security@apache.org
Mailing ListVendor Advisory

Timeline

No history available yet.