Description
SurrealDB versions before 2.1.0 contain a denial of service vulnerability in role conversion that allows privileged owner users to define users with nonexistent roles. Attackers can trigger an uncaught panic by signing in with a user assigned an invalid role, crashing the server.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| surrealdb | surrealdb | < 2.1.0 | 2.1.0 |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| crates.io | surrealdb | < 2.1.0 | 2.1.0 | GHSA-jc55-246c-r88f |
| crates.io | surrealdb-core | < 2.1.0 | 2.1.0 | GHSA-jc55-246c-r88f |
References
- GitHub Security Advisory (GHSA-jc55-246c-r88f) vendor-advisory
- VulnCheck Advisory: SurrealDB before 2.1.0 Denial of Service via Nonexistent Role third-party-advisory