Skip to main content

Failure to Sanitize Special Elements into a Different Plane (Special Element Injection)

CVE-2025-50213

High
9.8/10

Summary

Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) vulnerability in Apache Airflow Providers Snowflake. This issue affects apache-airflow-providers-snowflake package versions 3.3.0rc1 through 6.3.1. Sanitation of `table` and `stage` parameters were added in `CopyFromExternalStageToSnowflakeOperatorto` to prevent SQL injection. Users are recommended to upgrade to version 6.4.0rc1, which fixes the issue.

  • LOW
  • NETWORK
  • HIGH
  • UNCHANGED
  • NONE
  • NONE
  • HIGH
  • HIGH

CWE-75 - Failure to Sanitize Special Elements into a Different Plane (Special Element Injection)

The software does not adequately filter user-controlled input for special elements with control implications.

References

Advisory Timeline

  • Published