CVE-2018-14668

2019-08-1518:15:13

Google

osv.dev

7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

31.7%

JSON

In ClickHouse before 1.1.54388, “remote” table function allowed arbitrary symbols in “user”, “password” and “default_database” fields which led to Cross Protocol Request Forgery Attacks.

CPENameOperatorVersion
clickhouseeq53974
clickhouseeq1.1.54033-testing
clickhouseeq1.1.54362-testing
clickhouseeq1.1.54148-testing
clickhouseeq54009
clickhouseeq53995
clickhouseeq1.1.54376-testing
clickhouseeq1.1.54346-testing
clickhouseeq1.1.54348-testing
clickhouseeq1.1.54219-testing

Name	Operator	Version
clickhouse	eq	53974
clickhouse	eq	1.1.54033-testing
clickhouse	eq	1.1.54362-testing
clickhouse	eq	1.1.54148-testing
clickhouse	eq	54009
clickhouse	eq	53995
clickhouse	eq	1.1.54376-testing
clickhouse	eq	1.1.54346-testing
clickhouse	eq	1.1.54348-testing
clickhouse	eq	1.1.54219-testing