com.aoapps:ao-appcluster-all (2.0.1), com.aoapps:ao-appcluster-core (2.0.1) +241 more potentially affected by CVE-2023-50387 via dnsjava:dnsjava (>=3.5.0, <=3.5.3)

dnsjava:dnsjava MAVEN version =3.5.0, =1.3.1, =1.3.1, =1.3.1, =0.3.2-patch6, =6.3.2, =1.1.1, =2.5.9, =2.5.9, =2.1.4, =2.1.4, =2.1.4, =1.0, =1.2 and more Source cves: CVE-2023-50387 Source advisory: GHSA-CRJG-W57M-RQQF...

com.aoapps:ao-appcluster-all (2.0.1), com.aoapps:ao-appcluster-core (2.0.1) +241 more potentially affected by CVE-2023-50868 via dnsjava:dnsjava (>=3.5.0, <=3.5.3)

dnsjava:dnsjava MAVEN version =3.5.0, =1.3.1, =1.3.1, =1.3.1, =0.3.2-patch6, =6.3.2, =1.1.1, =2.5.9, =2.5.9, =2.1.4, =2.1.4, =2.1.4, =1.0, =1.2 and more Source cves: CVE-2023-50868 Source advisory: GHSA-MMWX-RJ87-VFGR...

Number withdrawn

Bootstrap is an open source web front-end framework developed using HTML, CSS, and JavaScript by Bootstrap. ch is a ClickHouse open source low-level Go client for ClickHouse. This CVE number has been withdrawn...

CVE-2024-23689

Exposure of sensitive information in exceptions in ClichHouse's clickhouse-r2dbc, com.clickhouse:clickhouse-jdbc, and com.clickhouse:clickhouse-client versions less than 0.4.6 allows unauthorized users to gain access to client certificate passwords via client exception logs. This occurs when...

CVE-2024-23689

Summary: CVE-2024-23689 affects ClickHouse Java libraries (clickhouse-r2dbc, com.clickhouse:clickhouse-jdbc, com.clickhouse:clickhouse-client) with versions

CVE-2024-23689: Generation of Error Message Containing Sensitive Information

Exposure of sensitive information in exceptions in ClichHouse's clickhouse-r2dbc, com.clickhouse:clickhouse-jdbc, and com.clickhouse:clickhouse-client versions less than 0.4.6 allows unauthorized users to gain access to client certificate passwords via client exception logs. This occurs when...

Password Disclosure

clickhouse-client is vulnerable to Password Disclosure. The vulnerability exists when client certificate authentication is enabled with password protection in the library, leading to password disclosure in client exception messages, such as the handling of ClickHouseException or SQLException...

cn.jrack:jrack-metadata-clickhouse (>=1.0.0, <=1.0.10), cn.jrack:jrack-test (>=1.0.0, <=1.0.10) +47 more potentially affected by CVE-2024-23689 via com.clickhouse:clickhouse-client (>=0.3.2, <=0.4.5)

com.clickhouse:clickhouse-client MAVEN version =0.3.2, =1.0.0, =1.0.0, =0.2.6, =2.10.6.9, =0.3.2, =0.3.2-patch11, =0.3.2, =0.3.2, =0.3.2, =0.3.2, =0.298, =2.0.0, =2.0.2 and more Source cves: CVE-2024-23689 Source advisory: OSV:GHSA-G8PH-74M6-8M7R...