Skip to content
OpenAdvisories

Vendor

crate

3 known vulnerabilities.

Products

crate 3
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.3
    CVE-2024-37309

    Client initialized Session-Renegotiation DoS

    CrateDB is a distributed SQL database. A high-risk vulnerability has been identified in versions prior to 5.7.2 where the TLS endpoint (port 4200) permits client-initiated renegotiation. In this scenario, an attacker can exploit this feature to repeatedly req…

    crate crate io.crate:crate Maven
  • Medium 5.7
    CVE-2024-24565

    CrateDB database has an arbitrary file read vulnerability

    CrateDB is a distributed SQL database that makes it simple to store and analyze massive amounts of data in real-time. There is a COPY FROM function in the CrateDB database that is used to import file data into database tables. This function has a flaw, and au…

    crate crate io.crate:crate Maven