Skip to content
Threat Feed
Subscribe

Tag

Http-Api

1 brief RSS
low advisory

CVE-2024-58368: SurrealDB Denial-of-Service via Malformed HTTP Headers

Unauthenticated attackers can exploit CVE-2024-58368 in SurrealDB versions prior to 1.1.0 by sending crafted HTTP REST API requests with malformed ID, DB, or NS headers, leading to an uncaught exception and server crash, resulting in denial of service.

SurrealDB denial-of-service web-vulnerability database http-api cve
1t 1c