CVE-2022-42965

LOW

snowflake-connector-python < 2.8.2 - Regular Expression Denial of Service via get_file_transfer_type

Title source: llm
STIX 2.1

Description

An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the snowflake-connector-python PyPI package, when an attacker is able to supply arbitrary input to the undocumented get_file_transfer_type method

References (1)

Core 1

Scores

CVSS v3 3.7
EPSS 0.0082
EPSS Percentile 52.2%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact partial

Details

CWE
CWE-1333
Status published
Products (3)
pypi/snowflake-connector-python 0 - 2.8.2PyPI
snowflake/snowflake-connector-python < 2.8.2
snowflake/snowflake_connector < 2.8.2
Published Nov 09, 2022
Tracked Since Feb 18, 2026