CVE-2024-58356
2 advisories.
crates.io/surrealdb CVE-2024-58356: low
SurrealDB has Silent Failure to Overwrite Table Definition of Relation Type
Action: Upgrade surrealdb to 2.1.4 or later.
cargo update -p surrealdb --precise 2.1.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.0.0 | 2.1.4 | - |
Fixed versions
| 2.1.4 |
Sources
- osv: GHSA-27vq-hv74-7cqp
- https://github.com/surrealdb/surrealdb/security/advisories/GHSA-27vq-hv74-7cqp
- https://nvd.nist.gov/vuln/detail/CVE-2024-58356
- https://github.com/surrealdb/surrealdb/pull/5260
- https://github.com/surrealdb/surrealdb/commit/2f9a58f830c24f107b4783da1f0704a502bc7734
- https://github.com/surrealdb/surrealdb
- https://www.vulncheck.com/advisories/surrealdb-before-permission-bypass-via-define-table-overwrite
CVE-2024-58356 · published · modified · JSON
crates.io/surrealdb-core CVE-2024-58356: low
SurrealDB has Silent Failure to Overwrite Table Definition of Relation Type
Action: Upgrade surrealdb-core to 2.1.4 or later.
cargo update -p surrealdb-core --precise 2.1.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.0.0 | 2.1.4 | - |
Fixed versions
| 2.1.4 |
Sources
- osv: GHSA-27vq-hv74-7cqp#crates.io/surrealdb-core
- https://github.com/surrealdb/surrealdb/security/advisories/GHSA-27vq-hv74-7cqp
- https://nvd.nist.gov/vuln/detail/CVE-2024-58356
- https://github.com/surrealdb/surrealdb/pull/5260
- https://github.com/surrealdb/surrealdb/commit/2f9a58f830c24f107b4783da1f0704a502bc7734
- https://github.com/surrealdb/surrealdb
- https://www.vulncheck.com/advisories/surrealdb-before-permission-bypass-via-define-table-overwrite
CVE-2024-58356 · published · modified · JSON