Lucene search
+L

1 matches found

OSV
OSV
added 2023/12/15 3:46 a.m.16 views

GHSA-X5FR-7HHJ-34J3 Full Table Permissions by Default

Default table permissions in SurrealDB were FULL instead of NONE. This would lead to tables having FULL permissions for SELECT, CREATE, UPDATE and DELETE unless some other permissions were specified via the PERMISSIONS clause. We have decided to treat this behaviour as a vulnerability due to its...

8.8CVSS7.7AI score0.00277EPSS
SaveExploits0References2
Rows per page
Query Builder