CVE-2024-24565: Cratedb Unauthorized File Read Skip

Missing superuser authorization check when reading from local file URI.

Provally CuratedPublic repositoryHighMedium confidenceVerifiedApache-2.0

Java^β

greprules fetch cve-2024-24565-cratedb-unauthorized-file-read-skip --engine opengrep

Description

Missing superuser authorization check when reading from local file URI.

License: Apache-2.0
Source context: Public repository
Source: Provally CVE rule catalog
Validation status: Verified
Quality signals: 145 downloads
0 direct145 via packs
· 0 stars · Quality score 61How quality works
Included packs: 2 packs

0 signals from signed-in users.