Unrated severityNVD Advisory· Published Aug 15, 2019· Updated Aug 5, 2024

CVE-2018-14669

Description

ClickHouse MySQL client before versions 1.1.54390 had "LOAD DATA LOCAL INFILE" functionality enabled that allowed a malicious MySQL database read arbitrary files from the connected ClickHouse server.

Affected products

ClickHouse/MySQL clientdescription
Clickhouse/Clickhousellm-fuzzy
Range: <1.1.54390

Patches

Vulnerability mechanics

References

clickhouse.yandex/docs/en/security_changelog/mitrex_refsource_MISC

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000