description: ClickHouse MySQL client before versions 1.1.54390 had "LOAD DATA LOCAL INFILE" functionality enabled that allowed a malicious MySQL database read arbitrary files from the connected ClickHouse server.
problem types: Local File Disclosure
affected:
{
product: ClickHouse
vendor: n/a
versions:
status: affected, version: All versions prior to version 1.1.54390.
}