Threats tagged 'ghsa-crcx-4c4m-p23p'

Multiple Snowflake client drivers using the authenticator=externalbrowser single sign-on flow had a vulnerability in the local loopback callback listener. This listener improperly reflected the Origin header in CORS responses and accepted the first token-bearing request without verifying a CSRF state value tied to the login attempt. An attacker able to reach the listener during an active login could submit a forged callback response, causing the authentication to fail. Fixes are available in various Snowflake client drivers and users must manually upgrade to these fixed versions.