← All advisories

Medium severity5.3NVD Advisory· Published Aug 15, 2019· Updated Jun 17, 2026

CVE-2018-14672

CVE-2018-14672

Description

In ClickHouse before 18.12.13, functions for loading CatBoost models allowed path traversal and reading arbitrary files through error messages.

Affected products

3

Clickhouse/Clickhouse2 versions
cpe:2.3:a:clickhouse:clickhouse:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:clickhouse:clickhouse:*:*:*:*:*:*:*:*range: <18.12.13
- (no CPE)range: <18.12.13
ClickHouse/ClickHousedescription

Patches

Vulnerability mechanics

References

1

clickhouse.yandex/docs/en/security_changelog/nvdRelease NotesVendor Advisory

News mentions

0

No linked articles in our index yet.