| 标题 | snowflake snowflake-jdbc v4.0.1 ReDOS |
|---|
| 描述 | A ReDoS vulnerability exists in logic related to JDBC URL handling and proxy configuration. Specifically, attacker-controlled input from the JDBC URL can be used in regular expression matching operations, allowing malicious patterns to cause catastrophic backtracking and CPU exhaustion. |
|---|
| 来源 | ⚠️ https://github.com/snowflakedb/snowflake-jdbc/issues/2505 |
|---|
| 用户 | fushuling (UID 45488) |
|---|
| 提交 | 2026-02-18 10時22分 (4 月前) |
|---|
| 管理 | 2026-02-26 19時34分 (8 days later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 348035 [snowflakedb snowflake-jdbc 直到 4.0.1 JDBC URL SdkProxyRoutePlanner.java SdkProxyRoutePlanner nonProxyHosts 拒绝服务] |
|---|
| 积分 | 17 |
|---|