Description
SurrealDB before 2.2.2 fails to validate HTTP redirects in http functions, allowing authenticated users to bypass deny-net restrictions by redirecting to blocked IP addresses. Attackers can host a public server that redirects to denied network targets, enabling server-side request forgery to access internal endpoints and retrieve sensitive information.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
surrealdb surrealdb
Default version status: unaffected
2.2.0 to < 2.2.2affected2.2.2unaffected
pkg:cargo/surrealdbsurrealdb surrealdb
Default version status: unaffected
2.1.0 to < 2.1.5affected2.1.5unaffected
pkg:cargo/surrealdbsurrealdb surrealdb
Default version status: unaffected
0 to < 2.0.5affected2.0.5unaffected
pkg:cargo/surrealdb