VulnSocial

CVE-2024-58368Disclosure(surrealdb / surrealdb)

LOWCVSS 8.7 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

SurrealDB versions before 1.1.0 fail to properly parse the ID, DB, and NS headers in HTTP REST API requests containing special characters. Unauthenticated attackers can send crafted HTTP requests with malformed header values to trigger an uncaught exception that crashes the server.

surrealdb CVEsBack to dashboard
0.0/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-248

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • surrealdb

Threat summary

  • 4 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 4 signals
  • Disclosure: 4 classified signals
  • Peaked 1d ago at 3 mentions (2026-07-18); latest day: 1
  • 4 total mentions across 2 days

Affected systems

Vendors
surrealdb
Products
surrealdb

Deep dive

Activity timeline4 mentions / 2d
01223Mentions · 2026-07-18: 3Mentions · 2026-07-19: 1Technical Details · 2026-07-18: 3Technical Details · 2026-07-19: 107-1807-19
Signal classification1 categories
Disclosure
4100.0%
Referenced assets4 URLs
Classification over time
DateTotalLabels
2026-07-183
Disclosure3
2026-07-191
Disclosure1
Full discourse4 posts
  • Infoflowcloud@infoflowcloud
    Disclosure

    🚨*CVE* CVE-2024-58368 SurrealDB versions before 1.1.0 fail to properly parse the ID, DB, and NS headers in HTTP REST API requests containing special characters. Unauthenticated attackers c… https://www.cve.org/CVERecord?id=CVE-2024-58368 ----- Traducción: CVE-2024-58368 Sur… http://infoflow.cloud`

    Post summary

    The post announces CVE-2024-58368, detailing a parsing flaw in SurrealDB’s REST API that may allow unauthenticated attackers to send requests with special characters in header fields.

    0001042
    92 followersView on X
  • ADK Cyber@ADKCyber
    Disclosure

    High severity CVE-2024-58368 (CVSS 8.7) in SurrealDB <1.1.0 allows crafted HTTP requests via header parsing. Update if in use: https://nvd.nist.gov/vuln/detail/CVE-2024-58368 via NVD Recent High CVSS #CyberSecurity #InfoSec #Vulnerability #AI #MachineLearning https://t.co/78350sihW0

    Post summary

    The tweet announces CVE-2024-58368, a high‑severity vulnerability in SurrealDB <1.1.0 that allows crafted HTTP requests through header parsing, citing its CVSS score and referencing the NVD entry.

    0000062
    89 followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2024-58368 Denial of Service in SurrealDB Versions Before 1.1.0 via Malformed HTTP Headers https://vulmon.com/vulnerabilitydetails?qid=CVE-2024-58368

    Post summary

    The text announces CVE‑2024‑58368, describing a denial‑of‑service flaw in SurrealDB caused by malformed HTTP headers, but it does not provide a PoC, exploit, or patch information.

    00000110
    4.1K followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2024-58368 SurrealDB versions before 1.1.0 fail to properly parse the ID, DB, and NS headers in HTTP REST API requests containing special characters. Unauthenticated attackers c… https://www.cve.org/CVERecord?id=CVE-2024-58368

    Post summary

    The text announces CVE‑2024‑58368, detailing a header‑parsing flaw in SurrealDB versions before 1.1.0 that could be abused by unauthenticated attackers.

    00000583
    57.8K followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appsurrealdbsurrealdb---

Explore more

Back to dashboardsurrealdb CVEssurrealdb vulnerabilities