CVE-2024-24565 Scanner
CVE-2024-24565 Scanner - Arbitrary File Read vulnerability in CrateDB
Used 2.5k times · 5.9k assets checked · domain, ipv4, subdomain
CVE
CVE-2024-24565
6.5
CVSSmedium
Exploitable remotely over the internet · low-privilege account sufficient · user interaction needed.
Description
CrateDB is a distributed SQL database that makes it simple to store and analyze massive amounts of data in real-time. There is a COPY FROM function in the CrateDB database that is used to import file data into database tables. This function has a flaw, and authenticated attackers can use the COPY FROM function to import arbitrary file content into database tables, resulting in information leakage. This vulnerability is patched in 5.3.9, 5.4.8, 5.5.4, and 5.6.1.
Attack Vector
Network
Privileges Req.
Low
User Interaction
Required
cratecratedb
Updated Sep 14, 2026View on NVD →
S4E scanner
CVE history: crate
Predict next CVE date with AIMonitor this CVE on your assets
S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.
Create a free account →