Skip to main content
cve.nowby Sazabi
← Maven
MavenPackage

io.crate:crate

4 known vulnerabilities (1 critical, 1 high, 2 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
4 · 1 critical, 1 high, 2 medium
Registry
Maven Central

Advisories 4

  • CrateDB's Blob HTTP handler bypasses authorization

    Affected: fixed in 6.2.8; from 6.3.0, fixed in 6.3.2.

  • CVE-2024-37309Medium 5.3

    Client initialized Session-Renegotiation DoS

    Affected: fixed in 5.7.2.

  • CVE-2024-24565Medium 5.7

    CrateDB database has an arbitrary file read vulnerability

    Affected: fixed in 5.3.9; from 5.4.0, fixed in 5.4.8; from 5.5.0, fixed in 5.5.4; from 5.6.0, fixed in 5.6.1.

  • CVE-2023-51982Critical 9.8

    CrateDB 5.5.1 is contains an authentication bypass vulnerability in the Admin UI component.

    Affected: fixed in 5.2.11; from 5.3.0, fixed in 5.3.8; from 5.4.0, fixed in 5.4.7; from 5.5.0, fixed in 5.5.2.