Lucene search
+L

3 matches found

OSV
OSV
added 2025/04/11 2:8 p.m.5 views

GHSA-3633-G6MG-P6QQ SurrealDB memory exhaustion via string::replace using regex

An authenticated user can craft a query using the string::replace function that uses a Regex to perform a string replacement. As there is a failure to restrict the resulting string length, this enables an attacker to send a string::replace function to the SurrealDB server exhausting all the memor...

7.1CVSS7.2AI score0.00235EPSS
SaveExploits0References4
Rows per page
Query Builder