Lucene search
+L

1 matches found

OSV
OSV
added 2025/04/11 2:7 p.m.10 views

GHSA-CCJ3-5P93-8P42 SurrealDB server-takeover via SurrealQL injection on backup import

The SurrealDB command-line tool allows exporting databases through the export command. It was discovered that table or field names are not properly sanitized in exports, leading to a SurrealQL injection when the backup is reimported. For the injection to occur, an authenticated System User with...

9.4CVSS7.5AI score0.00239EPSS
SaveExploits0References2
Rows per page
Query Builder