CVE Intelligence

Vulnerabilidades de Clickvisual

🔔 Criar alerta RSS

CVEs publicadas que afetam produtos de Clickvisual: 1 registro(s), com severidade, exploração e correções.

Clickvisual 1

Somente exploradas (KEV) →

CVE-2026-111670 Média · 4.3 CWE-862 16/10/2026
ClickVisual through 1.1.2 Missing Authorization in apiv2 Report Module
ClickVisual through 1.1.2 contains a missing authorization vulnerability in the /api/v2/reports handlers that allows authenticated low-privileged users to access ClickHouse instances they were not granted. Attackers can iterate the instance-id parameter in ReportSourceDatabases, ReportSourceTables, ReportTableColumns and WhereCheckRun to enumerate schemas and infer row counts of restricted tables.