AIKIDO-2024-10548
github.com/pocketbase/pocketbase is vulnerable to Integer Overflow
25
CVE Score
Low
Integer Overflow
TL;DR
Affected versions of this package are vulnerable to an integer overflow due to improper handling of large integers. Specifically, the use of strconv.Itoa leads to an int64 to int conversion overflow on 32-bit platforms. The issue has been addressed in the patched version by replacing strconv.Itoa with strconv.FormatInt, ensuring safe handling of large integers.
How do I fix this?
Upgrade the github.com/pocketbase/pocketbase library to the patch version.
Who does this affect?
You are affected if you are using a version that falls within the vulnerable range.
Versions
0.23.0 - 0.23.8
Fixed in 0.23.9Background info
github.com/pocketbase/pocketbase is vulnerable to Integer Overflow in versions 0.23.0 - 0.23.8.
Get secure today,
quickly and for free.
Secure your code, cloud, and runtime in one central system. Connect a repo to discover what the reasoning agents find in your codebase.
No credit card required | Scan results in 32 seconds.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPAuthorized© All Intel data is openly available and commercially licensed.