Beveiligingsadvies

CVE-2024-58366

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-07-18 13:10:06

Laatst bijgewerkt 2026-07-28 01:47:52

Toegewezen door VulnCheck

CVSS-score 9.0

Status PUBLISHED

Beschrijving

SurrealDB before 1.1.1 contains a format string vulnerability in the rquickjs Exception::throw_type function when scripting is enabled. Attackers with scripting privileges can supply format string sequences in error inputs to read arbitrary memory or execute code with SurrealDB process privileges.

← Alle CVE's bekijken Bekijk op cve.org ↗