CVE-2024-24565

CrateDB is a distributed SQL database that makes it simple to store and analyze massive amounts of data in real-time. There is a COPY FROM function in the CrateDB database that is used to import file data into database tables. This function has a flaw, and authenticated attackers can use the COPY FROM function to import arbitrary file content into database tables, resulting in information leakage. This vulnerability is patched in 5.3.9, 5.4.8, 5.5.4, and 5.6.1.

• CWE-22

• https://github.com/crate/crate/commit/4e857d675683095945dd524d6ba03e692c70ecd6Patch
• https://github.com/crate/crate/security/advisories/GHSA-475g-vj6c-xf96Exploit, Vendor Advisory
• https://github.com/crate/crate/commit/4e857d675683095945dd524d6ba03e692c70ecd6Patch
• https://github.com/crate/crate/security/advisories/GHSA-475g-vj6c-xf96Exploit, Vendor Advisory

Published

Jan 30, 2024

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-2456The Ecwid Ecommerce Shopping Cart plugin for WordPress is vu…6.4
• CVE-2024-24560Vyper is a Pythonic Smart Contract Language for the Ethereum…5.3
• CVE-2024-24561Vyper is a pythonic Smart Contract Language for the ethereum…9.8
• CVE-2024-24562vantage6-UI is the official user interface for the vantage6 …5.3
• CVE-2024-24563Vyper is a Pythonic Smart Contract Language for the Ethereum…9.8
• CVE-2024-24564Vyper is a pythonic Smart Contract Language for the ethereum…5.3
• CVE-2024-24566Lobe Chat is a chatbot framework that supports speech synthe…5.3
• CVE-2024-24567Vyper is a pythonic Smart Contract Language for the ethereum…5.3
• CVE-2024-24568Suricata is a network Intrusion Detection System, Intrusion …5.3
• CVE-2024-24569The Pixee Java Code Security Toolkit is a set of security AP…4.8
• CVE-2024-2457The Modal Window – create popup modal window plugin for Word…5.4
• CVE-2024-24570Statamic is a Laravel and Git powered CMS. HTML files crafte…6.1