Is CVE-2024-58366 being exploited?

No public exploit is currently tracked.

How severe is CVE-2024-58366?

CVE-2024-58366 has a CVSS v3 severity of HIGH (8.5).

Back

CVE-2024-58366

Description

SurrealDB before 1.1.1 contains a format string vulnerability in the rquickjs Exception::throw_type function when scripting is enabled. Attackers with scripting privileges can supply format string sequences in error inputs to read arbitrary memory or execute code with SurrealDB process privileges.