{"id":"EUVD-2025-210489","enisaUuid":"2cdc5e19-e8ff-3119-ab58-37a3957d247d","description":"SurrealDB before 2.2.2 fails to validate HTTP redirects in http functions, allowing authenticated users to bypass deny-net restrictions by redirecting to blocked IP addresses. Attackers can host a public server that redirects to denied network targets, enabling server-side request forgery to access internal endpoints and retrieve sensitive information.","datePublished":"Jul 18, 2026, 1:10:15 PM","dateUpdated":"Jul 28, 2026, 1:48:20 AM","baseScore":5.8,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:L/SC:H/SI:H/SA:H","references":"https://github.com/surrealdb/surrealdb/security/advisories/GHSA-5q9x-554g-9jgg\nhttps://www.vulncheck.com/advisories/surrealdb-before-ssrf-via-http-redirect-bypass\n","aliases":"CVE-2025-71398\nGHSA-xhwm-9486-8rgr\n","assigner":"VulnCheck","epss":0.33,"enisaIdProduct":[{"id":"5ade5610-1035-343e-afba-0fcbf2e6672c","product":{"name":"surrealdb","vendor":{"name":"surrealdb"}},"product_version":"0 \u003c2.1.5"},{"id":"d33d6171-e9fc-3d9c-a5e7-0295db7e08ef","product":{"name":"surrealdb","vendor":{"name":"surrealdb"}},"product_version":"0 \u003c2.0.5"},{"id":"eb13940b-01b6-3a60-8c61-5743d13b50b8","product":{"name":"surrealdb","vendor":{"name":"surrealdb"}},"product_version":"0 \u003c2.2.2"}],"enisaIdVendor":[{"id":"95a0548b-bfca-3321-ab01-2c5d6fd5224f","vendor":{"name":"surrealdb"}}],"enisaIdVulnerability":[{"id":"569dcd03-f568-346b-b390-cfab5a850579","vulnerability":{"id":"CVE-2025-71398","description":"SurrealDB before 2.2.2 fails to validate HTTP redirects in http functions, allowing authenticated users to bypass deny-net restrictions by redirecting to blocked IP addresses. Attackers can host a public server that redirects to denied network targets, enabling server-side request forgery to access internal endpoints and retrieve sensitive information.","datePublished":"Jul 18, 2026, 1:10:15 PM","dateUpdated":"Jul 28, 2026, 1:48:20 AM","status":"PUBLISHED","baseScore":5.8,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:L/SC:H/SI:H/SA:H","references":"https://github.com/surrealdb/surrealdb/security/advisories/GHSA-5q9x-554g-9jgg\nhttps://www.vulncheck.com/advisories/surrealdb-before-ssrf-via-http-redirect-bypass\n","enisa_id":"EUVD-2025-210489\n","assigner":"VulnCheck","epss":0.33,"dataProcessed":"Oct 27, 2026, 7:19:40 AM","vulnerabilityProduct":[{"id":"f268990d-34e7-3b6c-ae5e-623c573a5084","product":{"name":"surrealdb","vendor":{"name":"surrealdb"}},"product_version":"0 \u003c2.1.5"},{"id":"fcbd7b14-ba54-3a24-8fc4-63308632a0c2","product":{"name":"surrealdb","vendor":{"name":"surrealdb"}},"product_version":"0 \u003c2.2.2"},{"id":"fe42e9b4-ea64-3b31-b3a0-fbc47470f26e","product":{"name":"surrealdb","vendor":{"name":"surrealdb"}},"product_version":"0 \u003c2.0.5"}],"vulnerabilityVendor":[{"id":"6587272f-9165-38f8-8193-4bbd2e1c129a","vendor":{"name":"surrealdb"}}]}},{"id":"906e1b51-d004-3623-a939-b5ff47ec11b3","vulnerability":{"id":"GHSA-xhwm-9486-8rgr","description":"Duplicate Advisory: SurrealDB bypass of deny-net flags via redirect results in server-side request forgery (SSRF)","datePublished":"Jul 18, 2026, 3:31:49 PM","dateUpdated":"Sep 4, 2026, 7:33:58 PM","baseScore":0.0,"references":"https://github.com/surrealdb/surrealdb/security/advisories/GHSA-5q9x-554g-9jgg\nhttps://nvd.nist.gov/vuln/detail/CVE-2025-71398\nhttps://www.vulncheck.com/advisories/surrealdb-before-ssrf-via-http-redirect-bypass\n","enisa_id":"EUVD-2025-210489\n","aliases":"GHSA-xhwm-9486-8rgr\n","epss":0.0,"dataProcessed":"Oct 25, 2026, 1:57:47 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[]}