Vulnerabilities CVE-2024-58368

CVE-2024-58368

High

Open

TLP:CLEAR

SurrealDB before 1.1.0 Denial of Service via HTTP Headers

NVD CVE.org

DDoS

AI Analysis

No AI analysis yet.

Description

SurrealDB versions before 1.1.0 fail to properly parse the ID, DB, and NS headers in HTTP REST API requests containing special characters. Unauthenticated attackers can send crafted HTTP requests with malformed header values to trigger an uncaught exception that crashes the server.

Details

CVSS Score: 8.7
EPSS Score ⓘ: 0.38%

30.6th percentile
CVSS Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Confidence: 90%
Published: Jul 18, 2026
Last Modified: Jul 28, 2026

Notes

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

No opinions yet. Be the first to assess this intelligence.