CVE-2024-58368

Katalog CVE

CVSS 7.5 · High EPSS 0,65%

Kerentanan Uncaught Exception pada surrealdb. Skor CVSS 3.1 7.5 (High) menurut vulncheck.com.

Deskripsi (NVD)

SurrealDB versions before 1.1.0 fail to properly parse the ID, DB, and NS headers in HTTP REST API requests containing special characters. Unauthenticated attackers can send crafted HTTP requests with malformed header values to trigger an uncaught exception that crashes the server.

Rincian

Terbit di NVD

18 Juli 2026

Terakhir diubah

13 Agustus 2026

Status NVD

Analyzed

CVSS 3.1

7.5 (High), sumber vulncheck.com
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-248: Uncaught Exception

EPSS (30 hari)

0,65% peluang dieksploitasi; lebih tinggi dari 49,9% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/surrealdb/surrealdb/security/advisories/GHSA-m24x-r6q3-2vp9 advisory vendor
• https://www.vulncheck.com/advisories/surrealdb-before-denial-of-service-via-http-headers advisory pihak ketiga