CVE-2019-18657

ClickHouse before 19.13.5.44 allows HTTP header injection via the url table function.

Score

CVSS 3.1 5.3 Medium

Status

Modified - cve@mitre.org

Published

2019-10-31

Last modified

2024-08-05

Weaknesses

CWE-74

Affected products

• Clickhouse (Clickhouse)

References

• https://github.com/ClickHouse/ClickHouse/blob/master/CHANGELOG.md
• https://github.com/ClickHouse/ClickHouse/pull/6466
• https://github.com/ClickHouse/ClickHouse/pull/7526/files