Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2018-14669

ClickHouse MySQL client before versions 1.1.54390 had "LOAD DATA LOCAL INFILE" functionality enabled that allowed a malicious MySQL database read arbitrary files from the connected

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
yandex

Description

ClickHouse MySQL client before versions 1.1.54390 had "LOAD DATA LOCAL INFILE" functionality enabled that allowed a malicious MySQL database read arbitrary files from the connected ClickHouse server.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

n/a ClickHouse

  • All versions prior to version 1.1.54390.affected

References