CVE-2026-25737

概要

参考情報

• Budibase/budibase security advisory · Exploit

budibase のその他の脆弱性

• CVE-2026-54353高 7.1Budibase is an open-source low-code platform. Prior to 3.39.9, authenticated users with automation permissions can bypass Budibase's SSRF bl…
• CVE-2026-54352緊急 9.6Budibase is an open-source low-code platform. Prior to 3.39.9, `POST /api/pwa/process-zip` at packages/server/src/api/routes/static.ts:24 ac…
• CVE-2026-54351緊急 9.6Budibase is an open-source low-code platform. Prior to 3.39.9, the webhook trigger endpoint in Budibase is publicly accessible and passes th…
• CVE-2026-54350緊急 9.8Budibase is an open-source low-code platform. Prior to 3.39.12, an unauthenticated visitor of any published Budibase app reads every docume…
• CVE-2026-50137緊急 9.4Budibase is an open-source low-code platform. Prior to 3.39.0, an anonymous attacker who knows or can enumerate a workspace id (app_...) and…