CVE-2024-58365Disclosure(surrealdb / surrealdb)

LOWCVSS 7.1 · HIGH

Signal is active with 3 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

SurrealDB versions before 1.2.0 contain an uncaught exception vulnerability in the query executor when processing calls to nonexistent built-in functions. Authorized clients can craft pre-parsed queries invoking nonexistent functions to trigger a panic that crashes the server.

surrealdb CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Vendor / third-party advisories

Weakness type (CWE)

CWE-248

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

surrealdb

Threat summary

3 mentions across 1 observed day

What's happening

Technical details provided in 3 signals
Disclosure: 3 classified signals
3 total mentions across 1 day

Affected systems

Vendors

surrealdb

Products

surrealdb

Deep dive

Activity timeline3 mentions / 1d

Signal classification1 categories

Disclosure

3100.0%

Referenced assets3 URLs

By indicator

Full discourse3 posts

Vulmon Vulnerability Feed@VulmonFeeds92d
Disclosure
CVE-2024-58365 Uncaught Exception Vulnerability in SurrealDB Query Executor Before 1.2.0 https://vulmon.com/vulnerabilitydetails?qid=CVE-2024-58365
Post summary
A newly disclosed vulnerability (CVE-2024-58365) is identified as an uncaught exception flaw in SurrealDB's query executor prior to version 1.2.0, with no proof‑of‑concept, exploit, or mitigation details provided.
00000123
4.1K followersView on X
Infoflowcloud@infoflowcloud92d
Disclosure
🚨*CVE* CVE-2024-58365 SurrealDB versions before 1.2.0 contain an uncaught exception vulnerability in the query executor when processing calls to nonexistent built-in functions. Authorized … https://www.cve.org/CVERecord?id=CVE-2024-58365 ----- Traducción: CVE-2024-58365 Sur… http://infoflow.cloud`
Post summary
The post announces a new CVE (CVE-2024-58365) for SurrealDB, outlining the vulnerability as an uncaught exception triggered by calling non‑existent built‑in functions, but does not provide PoC, exploit, patch, or evidence of active exploitation.
0000029
92 followersView on X
CVE@CVEnew92d
Disclosure
CVE-2024-58365 SurrealDB versions before 1.2.0 contain an uncaught exception vulnerability in the query executor when processing calls to nonexistent built-in functions. Authorized … https://www.cve.org/CVERecord?id=CVE-2024-58365
Post summary
CVE-2024-58365 impacts SurrealDB versions before 1.2.0 via an uncaught exception in the query executor on nonexistent built‑in function calls. No PoC, exploit, patch, or active exploitation information is provided.
00000572
57.8K followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	surrealdb	surrealdb	-	-	-

Explore more

Back to dashboard surrealdb CVEs surrealdb vulnerabilities

What researchers are saying

CVE-2024-58365

Vulmon Vulnerability Feed@VulmonFeedsDisclosure

A newly disclosed vulnerability (CVE-2024-58365) is identified as an uncaught exception flaw in SurrealDB's query executor prior to version 1.2.0, with no proof‑of‑concept, exploit, or mitigation details provided.

Infoflowcloud@infoflowcloudDisclosure

The post announces a new CVE (CVE-2024-58365) for SurrealDB, outlining the vulnerability as an uncaught exception triggered by calling non‑existent built‑in functions, but does not provide PoC, exploit, patch, or evidence of active exploitation.

CVE@CVEnewDisclosure

CVE-2024-58365 impacts SurrealDB versions before 1.2.0 via an uncaught exception in the query executor on nonexistent built‑in function calls. No PoC, exploit, patch, or active exploitation information is provided.