Skip to content
OpenAdvisories

Vendor

aptabase

1 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • Medium 6.5

    Aptabase SQL Injection via ClickHouse query backend

    Aptabase through commit 5a89368 contains a SQL injection vulnerability in the ClickHouse query backend that allows authenticated attackers to read event data across all tenants by injecting unsanitized filter parameters into Liquid SQL templates. Attackers ca…