CVE-2019-18657

2019-10-3119:15:12

Google

osv.dev

7.2 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

38.0%

JSON

ClickHouse before 19.13.5.44 allows HTTP header injection via the url table function.

CPENameOperatorVersion
clickhouseeq1.1.54389-testing
clickhouseeq53974
clickhouseeq1.1.54033-testing
clickhouseeq1.1.54362-testing
clickhouseeq19.1.5-testing
clickhouseeq1.1.54148-testing
clickhouseeq54009
clickhouseeq53995
clickhouseeq1.1.54376-testing
clickhouseeq1.1.54346-testing

Name	Operator	Version
clickhouse	eq	1.1.54389-testing
clickhouse	eq	53974
clickhouse	eq	1.1.54033-testing
clickhouse	eq	1.1.54362-testing
clickhouse	eq	19.1.5-testing
clickhouse	eq	1.1.54148-testing
clickhouse	eq	54009
clickhouse	eq	53995
clickhouse	eq	1.1.54376-testing
clickhouse	eq	1.1.54346-testing