CVE Watchtower


← Back to CVE List

CVE-2025-71398NVD

Vulnerability Summary

SurrealDB before 2.2.2 fails to validate HTTP redirects in http functions, allowing authenticated users to bypass deny-net restrictions by redirecting to blocked IP addresses. Attackers can host a public server that redirects to denied network targets, enabling server-side request forgery to access internal endpoints and retrieve sensitive information.
Severity Level
UNKNOWN
Published Date
Jul 18, 2026
Last Modified
Jul 18, 2026
Exploitation Status
No confirmed exploitation yet
EPSS Score (30-Day)
Data Pending
Root Weakness (CWE)
N/A