1 matches found
SurrealDB: Port-specific --deny-net rules silently bypassed on HTTP redirect
SurrealDB offers http:: functions that can access external network endpoints, with the --allow-net and --deny-net capabilities used to restrict the set of network targets that can be reached. An authenticated user of SurrealDB can bypass a port-scoped --deny-net : rule by chaining an HTTP redirec...
5.8AI score
SaveExploits0References3Affected Software1
20