Budibase Improper Control of Dynamically-Managed Code Resources vulnerability

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2022-3225 · ADVISORY
• budibase/budibase commit d35864b · WEB
• Budibase/budibase release v1.3.20 · WEB
• budibase/budibase · PACKAGE
• huntr.dev/bounties/a13a56b7-04da-4560-b8ec-0d637d12a245 · WEB

Lỗ hổng khác của budibase

• CVE-2026-54353CAO 7.1Budibase is an open-source low-code platform. Prior to 3.39.9, authenticated users with automation permissions can bypass Budibase's SSRF bl…
• CVE-2026-54352NGHIÊM TRỌNG 9.6Budibase is an open-source low-code platform. Prior to 3.39.9, `POST /api/pwa/process-zip` at packages/server/src/api/routes/static.ts:24 ac…
• CVE-2026-54351NGHIÊM TRỌNG 9.6Budibase is an open-source low-code platform. Prior to 3.39.9, the webhook trigger endpoint in Budibase is publicly accessible and passes th…
• CVE-2026-54350NGHIÊM TRỌNG 9.8Budibase is an open-source low-code platform. Prior to 3.39.12, an unauthenticated visitor of any published Budibase app reads every docume…
• CVE-2026-50137NGHIÊM TRỌNG 9.4Budibase is an open-source low-code platform. Prior to 3.39.0, an anonymous attacker who knows or can enumerate a workspace id (app_...) and…