CVE-2023-51662
1 advisory.
NuGet/Snowflake.Data CVE-2023-51662: medium 6
Snowflake Connector .NET does not properly check the Certificate Revocation List (CRL)
Action: Upgrade Snowflake.Data to 2.1.5 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.0.25 | 2.1.5 | - |
Fixed versions
| 2.1.5 |
Sources
- osv: GHSA-hwcc-4cv8-cf3h
- https://github.com/snowflakedb/snowflake-connector-net/security/advisories/GHSA-hwcc-4cv8-cf3h
- https://nvd.nist.gov/vuln/detail/CVE-2023-51662
- https://github.com/snowflakedb/snowflake-connector-net/commit/49cb77ddd6e18c110eca35aa580e89d73c46cc33
- https://docs.snowflake.com/release-notes/clients-drivers/dotnet-2023#version-2-1-5-december-18-2023
- https://github.com/snowflakedb/snowflake-connector-net
CVE-2023-51662 · published · modified · JSON