Clickheat version 1.13 suffers from a remote command execution vulnerability.