Vulnerability · Published Jan 30, 2024 · Assigned by GitHub_M

CVE-2024-24565CrateDB database has an arbitrary file read vulnerability

Medium 5.7

In plain English

A medium-severity path traversal in crate from crate. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 3.1% (higher than 88% of all known vulnerabilities). Ready-made attack tooling exists: Nuclei. Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)5.7Medium

Exploit odds (30 days)3.1%top 12.2% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack tooling1Nuclei

Official description

CrateDB is a distributed SQL database that makes it simple to store and analyze massive amounts of data in real-time. There is a COPY FROM function in the CrateDB database that is used to import file data into database tables. This function has a flaw, and authenticated attackers can use the COPY FROM function to import arbitrary file content into database tables, resulting in information leakage. This vulnerability is patched in 5.3.9, 5.4.8, 5.5.4, and 5.6.1.

Affected packages & fixed versions

Ecosystem	Package	Fixed in	Advisory
Maven	io.crate:crate	5.3.9	GHSA-475g-vj6c-xf96
Maven	io.crate:crate	5.4.8	GHSA-475g-vj6c-xf96
Maven	io.crate:crate	5.5.4	GHSA-475g-vj6c-xf96
Maven	io.crate:crate	5.6.1	GHSA-475g-vj6c-xf96

Affected products (as reported)

Vendor	Product	Versions
crate	crate	< 5.3.9>= 5.4.0, < 5.4.8>= 5.5.0, < 5.5.4>= 5.6.0, < 5.6.1

Weakness: CWE-22 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N

References

https://github.com/crate/crate/security/advisories/GHSA-475g-vj6c-xf96 x_refsource_CONFIRM
https://github.com/crate/crate/commit/4e857d675683095945dd524d6ba03e692c70ecd6 x_refsource_MISC