CVE-2024-24565

MEDIUMNuclei

CrateDB database has an arbitrary file read vulnerability

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2024-24565 has a selected CVSS score of 5.7 (medium); EIP currently links 1 Nuclei template.

Description

CrateDB is a distributed SQL database that makes it simple to store and analyze massive amounts of data in real-time. There is a COPY FROM function in the CrateDB database that is used to import file data into database tables. This function has a flaw, and authenticated attackers can use the COPY FROM function to import arbitrary file content into database tables, resulting in information leakage. This vulnerability is patched in 5.3.9, 5.4.8, 5.5.4, and 5.6.1.

Description source: CVE List

Exploitation context

Available material

Nuclei templates
1

CISA SSVC decision

ExploitationPoC
AutomatableNo
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated Aug 23, 2024 · Source: CVE List

Affected products and versions

3
ProductSourceVersion range

crate

Browse crate / crate
CVE List< 5.3.9affected
>= 5.4.0, < 5.4.8affected
>= 5.5.0, < 5.5.4affected
>= 5.6.0, < 5.6.1affected

cratedb

Browse cratedb / cratedb

Default status: unknown

CVE ListBefore 5.3.9affected
5.4.0 to < 5.4.8affected
5.5.0 to < 5.5.4affected
5.6.0 to < 5.6.1affected

io.crate:crate

Browse Maven / io.crate:crate
GitHub AdvisoryBefore 5.3.9 · Fixed in 5.3.9affected
5.4.0 to < 5.4.8 · Fixed in 5.4.8affected
5.5.0 to < 5.5.4 · Fixed in 5.5.4affected
5.6.0affected
5.6.0 to < 5.6.1 · Fixed in 5.6.1affected

Nuclei templates

1
ProjectDiscoveryMEDIUMCrateDB Database - Arbitrary File ReadCVSS 6.5

CrateDB is a distributed SQL database that makes it simple to store and analyze massive amounts of data in real-time. There is a COPY FROM function in the CrateDB database that is used to import file data into database tables. This function has a flaw, and authenticated attackers can use the COPY FROM function to import arbitrary file content into database tables, resulting in information leakage.

Impact

Authenticated attackers can read arbitrary files on the server including sensitive configuration files and system files.

Remediation

Update CrateDB to a version that addresses CVE-2024-24565.

WeaknessesCWE-22
AuthorsDhiyaneshDK
Template tagscvecve2024cratedblfiexposureintrusivevuln
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CPE: cpe:2.3:a:cratedb:cratedb:*:*:*:*:*:*:*:*
FOFA: title="CrateDB"

Source: ProjectDiscovery

References

8