Beveiligingsadvies

CVE-2024-8055

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-03-20 10:10:20

Laatst bijgewerkt 2025-10-15 12:50:38

Toegewezen door @huntr_ai

CVSS-score 7.5

Status PUBLISHED

Beschrijving

Vanna v0.6.3 is vulnerable to SQL injection via Snowflake database in its file staging operations using the `PUT` and `COPY` commands. This vulnerability allows unauthenticated remote users to read arbitrary local files on the victim server, such as `/etc/passwd`, by exploiting the exposed SQL queries through a Python Flask API.

← Alle CVE's bekijken Bekijk op cve.org ↗