CWE-75

CVEs classified under CWE-75, newest first.

1 CVERSS

CVE-2024-58362High· 8.8

SurrealDB before 1.5.5 (and 2.0.0-beta before 2.0.0-beta.3) accepts an arbitrary object in the signin and signup operations of the RPC API without recursively validating it for non-computed values

SurrealDB before 1.5.5 (and 2.0.0-beta before 2.0.0-beta.3) accepts an arbitrary object in the signin and signup operations of the RPC API without recursively validating it for non-computed values. When a record access method defines a S…

▾ TwilightEPSS 0.64%via NVD