CyberRota Analysis
AI-GeneratedSurrealDB versions prior to 1.2.1 are susceptible to a denial-of-service vulnerability due to improper exception handling in span rendering when processing malformed queries with line terminator errors. This flaw allows authorized clients to crash the server by submitting such queries, leading to service interruptions. Organizations using affected versions should prioritize patching to mitigate potential disruptions in service.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
SurrealDB versions before 1.2.1 contain an uncaught exception handling vulnerability in span rendering when parsing queries with errors on line terminator characters. Authorized clients can submit malformed queries that trigger a panic in the span rendering code, crashing the server and causing denial of service.
Related CVEs
Other vulnerabilities affecting the same vendor(s)