Lucene search
+L

73 matches found

OSV
OSV
added 2026/07/01 8:20 p.m.12 views

GHSA-97VG-427P-8HX5 SurrealDB: Port-specific --deny-net rules silently bypassed on HTTP redirect

SurrealDB offers http:: functions that can access external network endpoints, with the --allow-net and --deny-net capabilities used to restrict the set of network targets that can be reached. An authenticated user of SurrealDB can bypass a port-scoped --deny-net : rule by chaining an HTTP redirec...

6.4CVSS5.8AI score
SaveExploits0References3
Rows per page
Query Builder