Threats tagged 'ghsa-vjjx-rfw4-rmfc'

SurrealDB versions prior to 3.1.0 contain a vulnerability where authenticated users with select permission on a table can bypass select permissions on other tables reachable via graph edges or back-references. This allows reading records from those target tables despite their select permissions being set to NONE. The issue arises because certain graph traversal operations fetch records directly from storage without enforcing the target table's select permissions. The vulnerability affects confidentiality within the current database but does not impact namespace or database isolation. Versions 3.1.0 and later include a fix that enforces select permissions correctly during graph traversals.