yun2026 发表于 4 天前

被年轻人遗忘的磁带 正在AI时代闷声发大财

被年轻人遗忘的磁带 正在AI时代闷声发大财

Snowflake Connector for Python:数据表列名可能被误作数据库指令

11月7日公开的漏洞记录CVE-2026-123859涉及Snowflake Connector for Python。在手动关闭标识符转义的非默认配置下,Python连接器向数据库写入数据表时,会将列名纳入生成的SQL。特制列名因而可能改变原计划执行的语句。披露同时涉及普通连接器与通用核心版本,关键条件是配置以及列名是否来自不受信任的数据。版本清单标出的受影响范围包括2.3.4起至4.8.1之前。

这条记录给出的CVSS 3.1基础评分为8.1分,分级为高危。按照评分列出的条件,利用者可通过网络接触相关功能,不以事先取得系统权限为必要条件,并且无需另一名用户进行额外交互。数据保密性、内容完整性和服务可用性三项的影响等级分别为高、高、高。

https://lightroom.adobe.com/shares/c1c9d6ddb5d94e488e70a43688845ae8
https://lightroom.adobe.com/shares/f9191b09bc0b5b48997866d80091c00f
https://lightroom.adobe.com/shares/28eb9729dedfea49a669d860bfa4a087
https://lightroom.adobe.com/shares/f4e237790244d54a8dfb6c57b443f667
https://lightroom.adobe.com/shares/4bb191993847b4459b5d1776bdd8889b
https://lightroom.adobe.com/shares/1ea0baec7c6bbe4aa1d6affdf50b178c
https://lightroom.adobe.com/shares/f0b48ed6c5e341449d756774ff406f06
https://lightroom.adobe.com/shares/bc08b71474187f4cb93fb208cf760ebd
https://lightroom.adobe.com/shares/87f94af684891042b2dd8579811c26a0
https://lightroom.adobe.com/shares/1a071b84d752204f84f25ae1e11a46a4
https://lightroom.adobe.com/shares/d7d418a41b10674a8a527a8e8536c430
https://lightroom.adobe.com/shares/4fa225edc760064bb420443753119fae
https://lightroom.adobe.com/shares/94e78074f101544e831af114149b03be
https://lightroom.adobe.com/shares/a2e8650ebf1f494daada149c56243f03
https://lightroom.adobe.com/shares/4a129ca74bae804389dbff2a5c13fc29
https://lightroom.adobe.com/shares/36a445f09fdcad438173a93e6fe3e8d2
https://lightroom.adobe.com/shares/1801cae3dd90c049ae5e524e94505dab
https://lightroom.adobe.com/shares/39ed3561a2163844bcd9a31db8bdafc6
https://lightroom.adobe.com/shares/0ba0f615474b4e44b0ba1fa42ba2cd19
https://lightroom.adobe.com/shares/02be68203c05544cb3b9c1e123b11463
https://lightroom.adobe.com/shares/d45c2f6ac768574baf292d88412f4d84
https://lightroom.adobe.com/shares/7ffae48a2d794d448daf89619f03ce84
https://lightroom.adobe.com/shares/94dac18447c26b48b19a6b0def1cebc3
https://lightroom.adobe.com/shares/64da9837cb2526498c0eec8a3e08c0ae
https://lightroom.adobe.com/shares/8fd2af5e59e5df4c804a9f25a38f0ec0
https://lightroom.adobe.com/shares/d8b56f2245cc924cb8877dae05af1279
https://lightroom.adobe.com/shares/ebfcf467629e3e40baff0de5f0634c49
https://lightroom.adobe.com/shares/949430b4e19ae2418774ec472ad981ad
https://lightroom.adobe.com/shares/8db1a097a1c06b4e8a5401c9eefa8fd9
https://lightroom.adobe.com/shares/c3703945525c434a839e49d22444cdc1
https://lightroom.adobe.com/shares/577edf8a10123e4f96834aec135c03fc
https://lightroom.adobe.com/shares/5933c8c42c22a9499eb320675edbda3e
https://lightroom.adobe.com/shares/c2ada66a11f0314cbfa7d6c2c36bdc4b
https://lightroom.adobe.com/shares/cca9f93a264e494a88401e72365c7110
https://lightroom.adobe.com/shares/497d21c87452454dba0b780d85e65aad
https://lightroom.adobe.com/shares/6c662fb8f3063e4c9ce7493cf7d010ea
https://lightroom.adobe.com/shares/89f4521794dd334492deafcf314f82fc
https://lightroom.adobe.com/shares/40a1abc6f16d2247b3d3272635541df9
https://lightroom.adobe.com/shares/d8c094856ca88445a5c9fce2cd278b79
https://lightroom.adobe.com/shares/cdaf63a560fb5447aec838c24ee14dfa
https://lightroom.adobe.com/shares/e806eaa31114a14c9adfdae8b404b520
https://lightroom.adobe.com/shares/a04e37d302f4a64a9707357cf7acdbd3
https://lightroom.adobe.com/shares/43d7e69733b13b46b3a880f1652296a0
https://lightroom.adobe.com/shares/50f1e81dc8ee074ab0936cc880808347
https://lightroom.adobe.com/shares/c1269204e1a799458c8713f3fa364a4f
https://lightroom.adobe.com/shares/44dd3905f882604089f5bfbf9a5992db
https://lightroom.adobe.com/shares/d38a30da19346d49a721776dd527ae7e
https://lightroom.adobe.com/shares/42e3a06b2a61d84bbf389e134048fa46
https://lightroom.adobe.com/shares/702c644bc3fb2845933c842c7c18da18
https://lightroom.adobe.com/shares/d4d0fe5f68cd674a8d67e59021c55e9a
页: [1]
查看完整版本: 被年轻人遗忘的磁带 正在AI时代闷声发大财