The Hacker News

Snowflake GitHub Actions Flaw Lets Crafted Issues Trigger Command Injection

Cybersecurity researchers at Wiz have disclosed a new GitHub Actions workflow injection vulnerability in Snowflake's public snowflakedb/snowflake-connector-net repository that it said could be exploited through a crafted GitHub issue to execute commands in a workflow containing internal Jira credentials. The issue was present in .github/workflows/jira_issue.yml, which ran when a

Por The Hacker News

1 minuto de lectura
Snowflake GitHub Actions Flaw Lets Crafted Issues Trigger Command Injection
Snowflake GitHub Actions Flaw Lets Crafted Issues Trigger Command Injection

¿Tiene noticias que compartir con el sector de eventos?

Envíe un comunicado de prensa o una noticia y llegue a miles de profesionales del sector de eventos.

Contáctenos→

Más en Cybersecurity, Cryptography & Digital Trust

Perspectivas relacionadas