CVE-2019-18657: Clickhouse

Medium severity, CVSS 5.3. EPSS: 1.5% chance of exploitation in the next 30 days.

ClickHouse before 19.13.5.44 allows HTTP header injection via the url table function.

Affected products

• Clickhouse Clickhouse: before 19.13.5.44 (fixed in 19.13.5.44)

Published 2019-10-31. Last modified 2026-06-17.