Vulnerabilities

TI-2024-24821 CVE-2024-37309 · GHSA-x268-qpg6-w9g2

Client initialized Session-Renegotiation DoS

MEDIUM 63

CrateDB is a distributed SQL database.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00704 Published 2024-06-13 Fixed in 5.7.2 CWE-770

TI-2024-16186 CVE-2024-24565 · GHSA-475g-vj6c-xf96

MEDIUM 62

CrateDB is a distributed SQL database that makes it simple to store and analyze massive amounts of data in real-time.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.03084 Published 2024-01-30 Fixed in 5.3.9, 5.4.8 +2 CWE-22

TI-2023-28488 CVE-2023-51982 · GHSA-7mgx-gvjw-m3w3

HIGH 82

CrateDB 5.5.1 is contains an authentication bypass vulnerability in the Admin UI component.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00731 Published 2024-01-30 Fixed in 5.2.11, 5.3.8 +2 CWE-287