Vendor
aptabase
1 known vulnerabilities.
Products
1 result · Clear filters · Feed
-
Medium 6.5
Aptabase SQL Injection via ClickHouse query backend
Aptabase through commit 5a89368 contains a SQL injection vulnerability in the ClickHouse query backend that allows authenticated attackers to read event data across all tenants by injecting unsanitized filter parameters into Liquid SQL templates. Attackers ca…