Skip to content
OpenAdvisories

Package · Maven

io.crate:crate

4 known vulnerabilities.

1 result · Clear filters · Feed

  • Critical 9.8

    CrateDB authentication bypass vulnerability

    CrateDB 5.5.1 is contains an authentication bypass vulnerability in the Admin UI component. After configuring password authentication and_ Local_ In the case of an address, identity authentication can be bypassed by setting the X-Real IP request header to a s…