thevar1able/ClickHouse
1
0
Fork 0
mirror of https://github.com/ClickHouse/ClickHouse.git synced 2024-11-22 23:52:03 +00:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #7567 from ClickHouse/add_cve_number_to_security_changelog

Browse Source 
Add CVE number for latest fix
This commit is contained in:
alesapin 2019-11-01 11:56:10 +03:00 committed by GitHub
commit 935183e105
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
docs/en/security_changelog.md
View File

@ -1,6 +1,6 @@
## Fixed in ClickHouse Release 19.13.6.1, 2019-09-20
### CVE-2019-
### CVE-2019-18657
Table function `url` had the vulnerability allowed the attacker to inject arbitrary HTTP headers in the request.
Credits: [Nikita Tikhomirov](https://github.com/NSTikhomirov)

2
docs/ru/security_changelog.md
View File

@ -1,6 +1,6 @@
## Исправлено в релизе 19.13.6.1 от 20 сентября 2019
### CVE-2019-
### CVE-2019-18657
Уязвимость в табличной функции `url` позволяла злоумышленнику добавлять произвольные HTTP-заголовки в запрос.
Обнаружено благодаря: [Никите Тихомирову](https://github.com/NSTikhomirov)