Signal is active with 3 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
SurrealDB versions before 1.1.1 fail to properly validate invocation of custom parameters and functions at root or namespace levels, causing server panic. Authorized clients can invoke these entities at unsupported levels to crash the SurrealDB server, resulting in denial of service.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2024-58369 Denial of Service via Unvalidated Custom Parameters in SurrealDB Before 1.1.1 https://vulmon.com/vulnerabilitydetails?qid=CVE-2024-58369
Post summary
The text notes a denial‑of‑service vulnerability in SurrealDB versions prior to 1.1.1 caused by unvalidated custom parameters, but it provides no PoC, exploit code, or mitigation details.
🚨*CVE* CVE-2024-58369 SurrealDB versions before 1.1.1 fail to properly validate invocation of custom parameters and functions at root or namespace levels, causing server panic. Authorized … https://www.cve.org/CVERecord?id=CVE-2024-58369 ----- Traducción: CVE-2024-58369 Sur… http://infoflow.cloud`
Post summary
CVE-2024-58369 is disclosed as a vulnerability in SurrealDB versions prior to 1.1.1 where improper validation of custom parameters can cause a server panic.
CVE-2024-58369 SurrealDB versions before 1.1.1 fail to properly validate invocation of custom parameters and functions at root or namespace levels, causing server panic. Authorized … https://www.cve.org/CVERecord?id=CVE-2024-58369
Post summary
The text discloses that SurrealDB versions before 1.1.1 suffer from a validation flaw in custom parameters/functions that causes server panics, with no PoC or active exploitation mentioned.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | surrealdb | surrealdb | - | - | - |