CVE-2024-24565 - Vulnerability Details - OpenCVE

Description

CrateDB is a distributed SQL database that makes it simple to store and analyze massive amounts of data in real-time. There is a COPY FROM function in the CrateDB database that is used to import file data into database tables. This function has a flaw, and authenticated attackers can use the COPY FROM function to import arbitrary file content into database tables, resulting in information leakage. This vulnerability is patched in 5.3.9, 5.4.8, 5.5.4, and 5.6.1.

Published: 2024-01-30

Score: 5.7 Medium

EPSS: 86.5% High

KEV: No

Impact:

Action:

Analysis

No analysis available yet.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

crate

crate

affected

Version	Status	Constraints
`< 5.3.9`	affected	—
`>= 5.4.0, < 5.4.8`	affected	—
`>= 5.5.0, < 5.5.4`	affected	—
`>= 5.6.0, < 5.6.1`	affected	—

Configuration 1 [-]

OR	cpe:2.3:a:cratedb:cratedb::::::::
	cpe:2.3:a:cratedb:cratedb::::::::
	cpe:2.3:a:cratedb:cratedb::::::::
	cpe:2.3:a:cratedb:cratedb::::::::

No data.

No data available yet.

Remediation

No remediation available yet.

Tracking

Sign in to view the affected projects.

Advisories

Source	ID	Title
Github GHSA	GHSA-475g-vj6c-xf96	CrateDB database has an arbitrary file read vulnerability

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction Required

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.86477.

Key SSVC decision points have not yet been added.

References

Link	Providers
https://github.com/crate/crate/commit/4e857d675683095945dd524d6ba03e692c70ecd6
https://github.com/crate/crate/security/advisories/GHSA-475g-vj6c-xf96

History

No history.

Subscriptions

Cratedb Cratedb

MITRE

Status: PUBLISHED

Assigner: GitHub_M

Published: 2024-01-30T16:46:15.200Z

Updated: 2024-08-23T19:32:35.447Z

Reserved: 2024-01-25T15:09:40.209Z

Link: CVE-2024-24565

Vulnrichment

Updated: 2024-08-01T23:19:52.900Z

NVD

Status : Modified

Published: 2024-01-30T17:15:12.110

Modified: 2024-11-21T08:59:25.960

Link: CVE-2024-24565

Redhat

No data.

OpenCVE Enrichment

No data.

Weaknesses

CWE-22

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-24565", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2024-01-25T15:09:40.209Z", "datePublished": "2024-01-30T16:46:15.200Z", "dateUpdated": "2024-08-23T19:32:35.447Z"}, "containers": {"cna": {"title": "CrateDB database has an arbitrary file read vulnerability", "problemTypes": [{"descriptions": [{"cweId": "CWE-22", "lang": "en", "description": "CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.7, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N", "version": "3.1"}}], "references": [{"name": "https://github.com/crate/crate/security/advisories/GHSA-475g-vj6c-xf96", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/crate/crate/security/advisories/GHSA-475g-vj6c-xf96"}, {"name": "https://github.com/crate/crate/commit/4e857d675683095945dd524d6ba03e692c70ecd6", "tags": ["x_refsource_MISC"], "url": "https://github.com/crate/crate/commit/4e857d675683095945dd524d6ba03e692c70ecd6"}], "affected": [{"vendor": "crate", "product": "crate", "versions": [{"version": "< 5.3.9", "status": "affected"}, {"version": ">= 5.4.0, < 5.4.8", "status": "affected"}, {"version": ">= 5.5.0, < 5.5.4", "status": "affected"}, {"version": ">= 5.6.0, < 5.6.1", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2024-01-30T16:46:15.200Z"}, "descriptions": [{"lang": "en", "value": "CrateDB is a distributed SQL database that makes it simple to store and analyze massive amounts of data in real-time. There is a COPY FROM function in the CrateDB database that is used to import file data into database tables. This function has a flaw, and authenticated attackers can use the COPY FROM function to import arbitrary file content into database tables, resulting in information leakage. This vulnerability is patched in 5.3.9, 5.4.8, 5.5.4, and 5.6.1."}], "source": {"advisory": "GHSA-475g-vj6c-xf96", "discovery": "UNKNOWN"}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-01T23:19:52.900Z"}, "title": "CVE Program Container", "references": [{"name": "https://github.com/crate/crate/security/advisories/GHSA-475g-vj6c-xf96", "tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://github.com/crate/crate/security/advisories/GHSA-475g-vj6c-xf96"}, {"name": "https://github.com/crate/crate/commit/4e857d675683095945dd524d6ba03e692c70ecd6", "tags": ["x_refsource_MISC", "x_transferred"], "url": "https://github.com/crate/crate/commit/4e857d675683095945dd524d6ba03e692c70ecd6"}]}, {"affected": [{"vendor": "cratedb", "product": "cratedb", "cpes": ["cpe:2.3:a:cratedb:cratedb:*:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThan": "5.3.9", "versionType": "custom"}, {"version": "5.4.0", "status": "affected", "lessThan": "5.4.8", "versionType": "custom"}, {"version": "5.5.0", "status": "affected", "lessThan": "5.5.4", "versionType": "custom"}, {"version": "5.6.0", "status": "affected", "lessThan": "5.6.1", "versionType": "custom"}]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-08-23T19:29:50.519568Z", "id": "CVE-2024-24565", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-08-23T19:32:35.447Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://github.com/crate/crate/security/advisories/GHSA-475g-vj6c-xf96", "name": "https://github.com/crate/crate/security/advisories/GHSA-475g-vj6c-xf96", "tags": ["x_refsource_CONFIRM", "x_transferred"]}, {"url": "https://github.com/crate/crate/commit/4e857d675683095945dd524d6ba03e692c70ecd6", "name": "https://github.com/crate/crate/commit/4e857d675683095945dd524d6ba03e692c70ecd6", "tags": ["x_refsource_MISC", "x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-01T23:19:52.900Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-24565", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-08-23T19:29:50.519568Z"}}}], "affected": [{"cpes": ["cpe:2.3:a:cratedb:cratedb:*:*:*:*:*:*:*:*"], "vendor": "cratedb", "product": "cratedb", "versions": [{"status": "affected", "version": "0", "lessThan": "5.3.9", "versionType": "custom"}, {"status": "affected", "version": "5.4.0", "lessThan": "5.4.8", "versionType": "custom"}, {"status": "affected", "version": "5.5.0", "lessThan": "5.5.4", "versionType": "custom"}, {"status": "affected", "version": "5.6.0", "lessThan": "5.6.1", "versionType": "custom"}], "defaultStatus": "unknown"}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-08-23T19:32:19.301Z"}}], "cna": {"title": "CrateDB database has an arbitrary file read vulnerability", "source": {"advisory": "GHSA-475g-vj6c-xf96", "discovery": "UNKNOWN"}, "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.7, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}}], "affected": [{"vendor": "crate", "product": "crate", "versions": [{"status": "affected", "version": "< 5.3.9"}, {"status": "affected", "version": ">= 5.4.0, < 5.4.8"}, {"status": "affected", "version": ">= 5.5.0, < 5.5.4"}, {"status": "affected", "version": ">= 5.6.0, < 5.6.1"}]}], "references": [{"url": "https://github.com/crate/crate/security/advisories/GHSA-475g-vj6c-xf96", "name": "https://github.com/crate/crate/security/advisories/GHSA-475g-vj6c-xf96", "tags": ["x_refsource_CONFIRM"]}, {"url": "https://github.com/crate/crate/commit/4e857d675683095945dd524d6ba03e692c70ecd6", "name": "https://github.com/crate/crate/commit/4e857d675683095945dd524d6ba03e692c70ecd6", "tags": ["x_refsource_MISC"]}], "descriptions": [{"lang": "en", "value": "CrateDB is a distributed SQL database that makes it simple to store and analyze massive amounts of data in real-time. There is a COPY FROM function in the CrateDB database that is used to import file data into database tables. This function has a flaw, and authenticated attackers can use the COPY FROM function to import arbitrary file content into database tables, resulting in information leakage. This vulnerability is patched in 5.3.9, 5.4.8, 5.5.4, and 5.6.1."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-22", "description": "CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2024-01-30T16:46:15.200Z"}}}, "cveMetadata": {"cveId": "CVE-2024-24565", "state": "PUBLISHED", "dateUpdated": "2024-08-23T19:32:35.447Z", "dateReserved": "2024-01-25T15:09:40.209Z", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "datePublished": "2024-01-30T16:46:15.200Z", "assignerShortName": "GitHub_M"}, "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:cratedb:cratedb:*:*:*:*:*:*:*:*", "matchCriteriaId": "FAF44B85-F769-493B-A674-7A8456A874F8", "versionEndExcluding": "5.3.9", "vulnerable": true}, {"criteria": "cpe:2.3:a:cratedb:cratedb:*:*:*:*:*:*:*:*", "matchCriteriaId": "64B0DBA5-7EA3-4398-ACF8-D852EFA5C744", "versionEndExcluding": "5.4.8", "versionStartIncluding": "5.4.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:cratedb:cratedb:*:*:*:*:*:*:*:*", "matchCriteriaId": "A4ABD3EE-2E41-4CF6-BC26-F947BB6499E2", "versionEndExcluding": "5.5.4", "versionStartIncluding": "5.5.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:cratedb:cratedb:*:*:*:*:*:*:*:*", "matchCriteriaId": "80901C4B-6B82-40BF-BC22-DA206B95003C", "versionEndExcluding": "5.6.1", "versionStartIncluding": "5.6.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "CrateDB is a distributed SQL database that makes it simple to store and analyze massive amounts of data in real-time. There is a COPY FROM function in the CrateDB database that is used to import file data into database tables. This function has a flaw, and authenticated attackers can use the COPY FROM function to import arbitrary file content into database tables, resulting in information leakage. This vulnerability is patched in 5.3.9, 5.4.8, 5.5.4, and 5.6.1."}, {"lang": "es", "value": "CrateDB es una base de datos SQL distribuida que simplifica el almacenamiento y an\u00e1lisis de cantidades masivas de datos en tiempo real. Hay una funci\u00f3n COPIAR DESDE en la base de datos CrateDB que se utiliza para importar datos de archivos a tablas de bases de datos. Esta funci\u00f3n tiene un defecto y los atacantes autenticados pueden utilizar la funci\u00f3n COPIAR DE para importar contenido de archivos arbitrario en tablas de bases de datos, lo que provoca una fuga de informaci\u00f3n. Esta vulnerabilidad est\u00e1 parcheada en 5.3.9, 5.4.8, 5.5.4 y 5.6.1."}], "id": "CVE-2024-24565", "lastModified": "2024-11-21T08:59:25.960", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.7, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 2.1, "impactScore": 3.6, "source": "security-advisories@github.com", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2024-01-30T17:15:12.110", "references": [{"source": "security-advisories@github.com", "tags": ["Patch"], "url": "https://github.com/crate/crate/commit/4e857d675683095945dd524d6ba03e692c70ecd6"}, {"source": "security-advisories@github.com", "tags": ["Exploit", "Vendor Advisory"], "url": "https://github.com/crate/crate/security/advisories/GHSA-475g-vj6c-xf96"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "https://github.com/crate/crate/commit/4e857d675683095945dd524d6ba03e692c70ecd6"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit", "Vendor Advisory"], "url": "https://github.com/crate/crate/security/advisories/GHSA-475g-vj6c-xf96"}], "sourceIdentifier": "security-advisories@github.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-22"}], "source": "security-advisories@github.com", "type": "Secondary"}]}