VYPR
← All advisories
High severity7.5NVD Advisory· Published Aug 15, 2019· Updated Jun 17, 2026

CVE-2018-14669

CVE-2018-14669

Description

ClickHouse MySQL client before versions 1.1.54390 had "LOAD DATA LOCAL INFILE" functionality enabled that allowed a malicious MySQL database read arbitrary files from the connected ClickHouse server.

Affected products

3
  • ClickHouse/MySQL clientdescription
  • Clickhouse/Clickhousellm-fuzzy2 versions
    <1.1.54390+ 1 more
    • (no CPE)range: <1.1.54390
    • cpe:2.3:a:clickhouse:clickhouse:*:*:*:*:*:*:*:*range: <1.1.54390

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.