yun2025 发表于 前天 22:26

美民主党严管 AI 基建 德州新州长态度软化「声称不讨厌资料中心」

美民主党严管 AI 基建 德州新州长态度软化「声称不讨厌资料中心」

Snowflake Connector for Python:数据表列名可能被误作数据库指令

11月7日公开的漏洞记录CVE-2026-123859涉及Snowflake Connector for Python。在手动关闭标识符转义的非默认配置下,Python连接器向数据库写入数据表时,会将列名纳入生成的SQL。特制列名因而可能改变原计划执行的语句。披露同时涉及普通连接器与通用核心版本,关键条件是配置以及列名是否来自不受信任的数据。版本清单标出的受影响范围包括2.3.4起至4.8.1之前。

这条记录给出的CVSS 3.1基础评分为8.1分,分级为高危。按照评分列出的条件,利用者可通过网络接触相关功能,不以事先取得系统权限为必要条件,并且无需另一名用户进行额外交互。数据保密性、内容完整性和服务可用性三项的影响等级分别为高、高、高。

https://lightroom.adobe.com/shares/783d67c61c83b84e952a092ed6e0c65a
https://lightroom.adobe.com/shares/9e745a833b3b0440a8d666c7ad07cb20
https://lightroom.adobe.com/shares/68146a50c6d4804f964d8b05a9f4bac8
https://lightroom.adobe.com/shares/c0e320de17b21343a5c9bb5ddaee6575
https://lightroom.adobe.com/shares/ccf17b7a39822c4883c49b77628027d2
https://lightroom.adobe.com/shares/6baba58e68533540b5bbb6e4a2dad887
https://lightroom.adobe.com/shares/87c5a1561035a043bb6924a67a5c2fd8
https://lightroom.adobe.com/shares/bac8ea2f16d2464eb9f5886ad6789f70
https://lightroom.adobe.com/shares/7c8bdcaf5742a642bf3fa8809fa33b6b
https://lightroom.adobe.com/shares/81a7f3f5e553624cbbf985f2af2b6fe9
https://lightroom.adobe.com/shares/14168955d288e24cadd33529d77cc4c4
https://lightroom.adobe.com/shares/08beb1a90fc6a34eb78cbf1b931f4c90
https://lightroom.adobe.com/shares/8b48365830f97f4dbd352f55dd4f1ec0
https://lightroom.adobe.com/shares/319e3ec141dae946afca567cca10554a
https://lightroom.adobe.com/shares/22861b7ee9d10f46afdd4954bab46ea2
https://lightroom.adobe.com/shares/a812505a2b0b4e4098749c51ca861d98
https://lightroom.adobe.com/shares/710d3e87f7f6ff47a87cb46d9fb8904c
https://lightroom.adobe.com/shares/dd525a2306716b4296d43e5650639351
https://lightroom.adobe.com/shares/6a5d26b923d2934dbe24fc1161d53bd4
https://lightroom.adobe.com/shares/16ae12e35785a942bf144d4bf386e577
https://lightroom.adobe.com/shares/cdff1c96495afb4985d2b35a327263df
https://lightroom.adobe.com/shares/3c6083c01fd0b545a85f6e190b9e0a92
https://lightroom.adobe.com/shares/3ddb154f83ed5a4180f4a1c7707dd224
https://lightroom.adobe.com/shares/570850ca60941d49a6f356231c8a4d46
https://lightroom.adobe.com/shares/c3b00ffdae2efe47acf3a9d4df5227b7
https://lightroom.adobe.com/shares/bb3064a2b321f945bd634bad7bc64582
https://lightroom.adobe.com/shares/aca4ace2c93eaf48b9166a5002476461
https://lightroom.adobe.com/shares/316e72dee9b31943b0ca49adcbf3bf58
https://lightroom.adobe.com/shares/58d43a841a7a8b418653ce4d81438574
https://lightroom.adobe.com/shares/3a81a9bbff042b42b34dfe9135101694
https://lightroom.adobe.com/shares/007c2b209ddc0e4e87afa37a3ccdb0ae
https://lightroom.adobe.com/shares/b7c63e4a44606f428476b5507ccb6fdf
https://lightroom.adobe.com/shares/1487ba37442dea44bea862534877e321
https://lightroom.adobe.com/shares/9f0afe90c7e4a043b8ffd25e504c1728
https://lightroom.adobe.com/shares/89855fafdb2bfb418937753b342f29a8
https://lightroom.adobe.com/shares/f944d5f4174c9a4e80949821af889552
https://lightroom.adobe.com/shares/52de2f0a5543cc44a4ac0a55e69ad968
https://lightroom.adobe.com/shares/ae786d19679eca439ac76262d6653b48
https://lightroom.adobe.com/shares/3e27ebbc8f9ccd49b529c4e7840f4e4d
https://lightroom.adobe.com/shares/4e55c3f2051b8746a8afc7c07350e4fc
https://lightroom.adobe.com/shares/0bffb1a0b8bff74f9fa6abf16c1c206d
https://lightroom.adobe.com/shares/e57b9d53b070654783d60aa3da5744c8
https://lightroom.adobe.com/shares/006bd7cd87cb5e4585b6a4ab86fb91dd
https://lightroom.adobe.com/shares/b4602ebb7357a64f9247c7ffc83f0219
https://lightroom.adobe.com/shares/6a3cc9b5bf721b46966f0c98fa90edaf
https://lightroom.adobe.com/shares/ec5c162aa4315344973809392afef186
https://lightroom.adobe.com/shares/266e377930b0ac49a08e1e1f10db8f7a
https://lightroom.adobe.com/shares/6561eefbf1290043b1ac210a8c2530de
https://lightroom.adobe.com/shares/b37285fc8060be4eaa0e1b4c19984615
https://lightroom.adobe.com/shares/a185c8cfcb024b49869dbce4fa74ff3f

桃夭夭 发表于 前天 22:32

小手一抖,沙发到手!
页: [1]
查看完整版本: 美民主党严管 AI 基建 德州新州长态度软化「声称不讨厌资料中心」