CVE-2022-3225: Budibase Improper Control of… – CVSS 5.7 · Watchpost

← All vulnerabilities

Budibase Improper Control of Dynamically-Managed Code Resources vulnerability

MÉDIO 5.7CVE-2022-3225 · GHSA-x92g-49gh-63qm · Published 16/09/2022 · updated 17/06/2026

Em resumo

CVE-2022-3225 é uma vulnerabilidade MÉDIO (CVSS 5.7) que afeta budibase (budibase), @budibase/bbui, @budibase/builder.
Chance de exploração nos próximos 30 dias (EPSS): 0.96%, maior que 61.5% das vulnerabilidades.
Correção: atualize para 1.3.20 ou posterior.

Package	Affected versions	Patched versions
budibase budibase	`< 1.3.20`	`1.3.20`
@budibase/bbui npm	`< 1.3.20`	`1.3.20`
@budibase/builder npm	`< 1.3.20`	`1.3.20`
@budibase/worker npm	`< 1.3.20`	`1.3.20`

Description

Improper Control of Dynamically-Managed Code Resources in GitHub repository budibase/budibase prior to 1.3.20.

NVD description

Improper Control of Dynamically-Managed Code Resources in GitHub repository budibase/budibase prior to 1.3.20.

References

nvd.nist.gov/vuln/detail/CVE-2022-3225 · ADVISORY
budibase/budibase commit d35864b · WEB
Budibase/budibase release v1.3.20 · WEB
budibase/budibase · PACKAGE
huntr.dev/bounties/a13a56b7-04da-4560-b8ec-0d637d12a245 · WEB

Mais vulnerabilidades de budibase

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free