Skip to content
OpenAdvisories

Vendor

clickvisual

1 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • Medium 4.3

    ClickVisual through 1.1.2 Missing Authorization in apiv2 Report Module

    ClickVisual through 1.1.2 contains a missing authorization vulnerability in the /api/v2/reports handlers that allows authenticated low-privileged users to access ClickHouse instances they were not granted. Attackers can iterate the instance-id parameter in Re…