CVE-2026-63744

4.1 Moyenne

Publiée le 20/07/2026 à 14:19 · Modifiée le 22/07/2026 à 17:45 · Analysée par le NVD · Source : disclosure@vulncheck.com

Description

SurrealDB before 3.1.5 contains a server-side request forgery vulnerability in the JWKS fetcher that follows HTTP redirects without re-validating redirect targets against network capabilities. Attackers with Owner role can configure a JWKS URL pointing to an allowlisted host that redirects to blocked internal addresses, bypassing network access controls.

Traduire en français

Produits concernés

Scores CVSS

Version	Score	Source	Vecteur
4.0	5.1 Moyenne	disclosure@vulncheck.com	`CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X`
3.1	4.1 Moyenne	disclosure@vulncheck.com	`CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N`

Faiblesses (CWE)

CWE-918

Références

https://github.com/surrealdb/surrealdb/security/advisories/GHSA-h5rg-8p7f-47g2 Vendor AdvisoryMitigation
https://www.vulncheck.com/advisories/surrealdb-before-ssrf-via-jwks-url-redirect Third Party Advisory

CVE-2026-63744

Description

Produits concernés

Scores CVSS

Faiblesses (CWE)

Références

Ailleurs