SurrealDB before 2.1.4 Permission Bypass via DEFINE TABLE OVERWRITE

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2024-58356 · Microsoft / collected KEV context

EUVD-2024-55673

GHSA-vmg6-53r4-jhpw

GHSA-27vq-hv74-7cqp

cve-program · CVE-2024-58356

• https://github.com/surrealdb/surrealdb/security/advisories/GHSA-27vq-hv74-7cqp
• https://www.vulncheck.com/advisories/surrealdb-before-permission-bypass-via-define-table-overwrite

euvd · EUVD-2024-55673

• https://github.com/surrealdb/surrealdb/security/advisories/GHSA-27vq-hv74-7cqp
• https://www.vulncheck.com/advisories/surrealdb-before-permission-bypass-via-define-table-overwrite

nvd · CVE-2024-58356

• https://github.com/surrealdb/surrealdb/security/advisories/GHSA-27vq-hv74-7cqp
• https://www.vulncheck.com/advisories/surrealdb-before-permission-bypass-via-define-table-overwrite

osv · GHSA-27vq-hv74-7cqp

• https://github.com/surrealdb/surrealdb/security/advisories/GHSA-27vq-hv74-7cqp
• https://nvd.nist.gov/vuln/detail/CVE-2024-58356
• https://github.com/surrealdb/surrealdb/pull/5260
• https://github.com/surrealdb/surrealdb/commit/2f9a58f830c24f107b4783da1f0704a502bc7734
• https://github.com/surrealdb/surrealdb
• https://www.vulncheck.com/advisories/surrealdb-before-permission-bypass-via-define-table-overwrite

osv · GHSA-vmg6-53r4-jhpw

• https://github.com/surrealdb/surrealdb/security/advisories/GHSA-27vq-hv74-7cqp
• https://nvd.nist.gov/vuln/detail/CVE-2024-58356
• https://www.vulncheck.com/advisories/surrealdb-before-permission-bypass-via-define-table-overwrite

No related operational record is retained in the current change model.