AIKIDO-2024-10238
github.com/Clickhouse/Clickhouse-go/v2 is vulnerable to Uncaught Exception
25
Low Risk
This Affects:
github.com/Clickhouse/Clickhouse-go/v2TL;DR
Affected versions of the package throw uncaught exceptions. The stdlib driver attempts to use a database connection without verifying its condition, leading to unexpected errors. Attackers can exploit this by inserting illegal statements, causing the connection to close and potentially crashing the program.
Who does this affect?
You are affected if you are using a version that falls within the vulnerable range.
Background info
github.com/Clickhouse/Clickhouse-go/v2 is vulnerable to Uncaught Exception in versions 2.0.0 - 2.28.1.
How to fix this
Upgrade the github.com/Clickhouse/Clickhouse-go/v2 library to the patch version.
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
SOC 2Compliant
ISO 27001Compliant