| Package | Affected versions | Patched versions |
|---|---|---|
| clickhouse | < 1.1.54388 | 1.1.54388 |
In ClickHouse before 1.1.54388, "remote" table function allowed arbitrary symbols in "user", "password" and "default_database" fields which led to Cross Protocol Request Forgery Attacks.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free