Beveiligingsadvies

CVE-2025-71393

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-07-18 13:10:12

Laatst bijgewerkt 2026-07-28 01:48:16

Toegewezen door VulnCheck

CVSS-score 6.0

Status PUBLISHED

Beschrijving

SurrealDB before 2.2.2 with scripting enabled fails to properly enforce recursion limits when native functions contain embedded JavaScript that issues new queries. Authenticated attackers can bypass the recursion limit by chaining native and JavaScript function calls to trigger infinite recursion and exhaust server memory.

← Alle CVE's bekijken Bekijk op cve.org ↗