Veille CVE

Recherche « Delskayn rquickjs »

1 CVE

  1. CVE-2024-58366 8.8 Élevée

    surrealdb · Delskayn rquickjs · Surrealdb surrealdb

    SurrealDB before 1.1.1 contains a format string vulnerability in the rquickjs Exception::throw_type function when scripting is enabled. Attackers with scripting privileges can supply format string sequences in error inputs to read arbitrary memory or execute code with SurrealDB process privileges.