Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2024-58363

SurrealDB before 1.5.4 Authentication Bypass via Database Switch

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
VulnCheck

Description

SurrealDB before 1.5.4 and 2.0.0-alpha.1 before 2.0.0-alpha.6 fails to properly validate authentication when a scope user switches databases using the USE clause or use method. Attackers with an authenticated session can impersonate an unrelated user in a different database if a user record with an identical identifier exists, allowing unauthorized actions if permissions rely solely on the $auth parameter.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

surrealdb surrealdb

Default version status: unaffected

  • 0 to < 1.5.4affected
  • 1.5.4unaffected
pkg:cargo/surrealdb

surrealdb surrealdb

Default version status: unaffected

  • 2.0.0-alpha.1 to < 2.0.0-alpha.6affected
  • 2.0.0-alpha.6unaffected
pkg:cargo/surrealdb

surrealdb surrealdb-core

Default version status: unaffected

  • 0 to < 1.5.1affected
  • 1.5.1unaffected
pkg:cargo/surrealdb-core

References