Researchers Hack Snowflake PostgreSQL Database to Gain Full Server-Level Code Execution

A security test of Snowflake-managed PostgreSQL has shown how a database role with limited privileges could be turned into control of the server running the database. Researchers chained several built-in PostgreSQL features to reach operating-system command execution, even though Snowflake had blocked common ways to run commands and access files... Weiterlesen: Researchers Hack Snowflake PostgreSQL Database to Gain Full Server-Le…