Description (CNA)
ClickHouse MySQL client before versions 1.1.54390 had "LOAD DATA LOCAL INFILE" functionality enabled that allowed a malicious MySQL database read arbitrary files from the connected ClickHouse server.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / ClickHouse | affected All versions prior to version 1.1.54390. |
CWE
No CWE identifiers supplied.
References
ADP enrichment
No English description supplied.