Lucene search
+L

746 matches found

Kitploit
Kitploit
added 2026/09/07 7:59 p.m.6 views

CVE-2026-54350-Budibase-NoSQL-Injection

CVE-2026-54350 — Inyección de operadores NoSQL no autenticada en Budibase Inyección de operadores JSON/NoSQL no autenticada en Budibase. Cualquier visitante anónimo de una aplicación Budibase publicada que exponga una consulta PÚBLICA respaldada por una fuente de datos de documentos MongoDB,...

10CVSS8AI score0.00538EPSS
SaveExploits2References4
Nuclei
Nuclei
added 2026/09/07 6:34 a.m.77 views

Budibase - Authentication Bypass

Budibase = 3.31.4 contains an authentication bypass caused by unanchored regex in authorized middleware matching webhook path patterns in query strings, letting unauthenticated remote attackers access any server-side API endpoint, exploit requires crafted request with webhook pattern in URL. id:...

9.1CVSS5.8AI score0.15339EPSS
SaveExploits3References2
Kitploit
Kitploit
added 2026/09/05 2:59 p.m.6 views

CVE-2026-31816

CVE-2026-31816 - Budibase 认证绕过至远程代码执行(RCE) CVE-2026-31816 是一个影响 Budibase 的严重认证与授权绕过漏洞。 该漏洞存在于负责保护 API 端点的服务端授权中间件中。Budibase 尝试使用一个未锚定的正则表达式来识别合法的 Webhook 端点,并将该表达式作用于 Koa 的 ctx.request.url。 由于 ctx.request.url 包含查询字符串,攻击者可以将一个看起来像 Webhook 的路径注入到原本无关的 API 请求的查询组件中。 例如: root@kitploit:...

9.1CVSS6.2AI score0.15339EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/04 9:15 a.m.8 views

CVE-2026-54356

CVE-2026-54356 — Budibase: authenticated arbitrary S3 signed upload URL issuance A low-privilege BASIC role authenticated user of a published Budibase workspace can call POST /api/attachments/:datasourceId/url and obtain an S3 pre-signed upload URL signed with the workspace datasource's server-si...

7.1CVSS5.8AI score0.00244EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/03 1:36 a.m.8 views

CVE-2026-31816-rshell

CVE-2026-31816 Reverse Shell Exploit Overview This tool exploits CVE-2026-31816 to establish a reverse shell connection on a target Budibase server. Attack Chain : Authentication Bypass → Upload DATASOURCE Plugin → Server-side Code Execution → Reverse Shell Requirements Python 3.6+ requests libra...

9.1CVSS6AI score0.15339EPSS
SaveExploits3
NVD
NVD
added 2026/08/28 12:16 p.m.8 views

CVE-2026-82246

Budibase Server before 3.41.3 contains a server-side request forgery vulnerability in the query import endpoint that fails to validate user-supplied URLs before fetching content. Attackers can submit arbitrary URLs to retrieve responses from internal services including cloud metadata endpoints an...

7.1CVSS0.00178EPSS
SaveExploits0References2
NVD
NVD
added 2026/08/28 12:16 p.m.10 views

CVE-2026-82245

Budibase before 3.41.3 fails to enforce role-based authorization on license management endpoints, allowing any authenticated user to delete license keys or manipulate offline tokens. Attackers with basic user privileges can access /api/global/license/ endpoints to disable premium features and...

8.1CVSS0.00275EPSS
SaveExploits0References2
NVD
NVD
added 2026/08/28 12:16 p.m.9 views

CVE-2026-82244

Budibase versions before 3.41.3 contain a remote code execution vulnerability in plugin handling that allows authenticated admin users to execute arbitrary code by uploading a malicious plugin tarball. The server calls eval on plugin JavaScript files without sandboxing in the main Node.js process...

9.4CVSS0.0062EPSS
SaveExploits0References2
NVD
NVD
added 2026/08/28 12:16 p.m.14 views

CVE-2026-82240

Budibase before 3.41.3 fails to validate app-scoped builder role assignments in the public user create and update endpoints, allowing an authenticated app-scoped builder to grant builder access to unrelated apps. Attackers can submit crafted requests to the user update API with builder.apps field...

8.6CVSS0.00258EPSS
SaveExploits0References2
NVD
NVD
added 2026/08/28 12:16 p.m.8 views

CVE-2026-82243

Budibase Server before 3.41.3 contains a server-side request forgery vulnerability in the datasource verify endpoint that allows builder-level users to supply arbitrary URLs without SSRF validation. Attackers can exploit this to leak internal CouchDB credentials by making requests to...

8.3CVSS0.00243EPSS
SaveExploits0References2
NVD
NVD
added 2026/08/28 12:16 p.m.9 views

CVE-2026-82241

Budibase backend-core @budibase/backend-core, as used by @budibase/server omits the shared address space range 100.64.0.0/10 from its default SSRF blacklist DEFAULTBLACKLIST used by REST datasource query previews. When the default blacklist is active i.e., a self-hosted deployment has not defined...

7.1CVSS0.00178EPSS
SaveExploits0References2
NVD
NVD
added 2026/08/28 12:16 p.m.10 views

CVE-2026-82242

Budibase versions before 3.41.3 contain a missing authorization vulnerability in the POST /api/resources/duplicate endpoint that allows authenticated builders to inject tables, automations, queries, and screens into any other application without holding any role in the destination workspace...

8.3CVSS0.00297EPSS
SaveExploits0References2
NVD
NVD
added 2026/08/28 12:16 p.m.7 views

CVE-2026-82239

Budibase before 3.41.3 fails to enforce per-table role restrictions on the POST /api/datasources/query endpoint, allowing low-privilege BASIC users to read, create, update, or delete rows in any table regardless of configured permissions. Attackers with BASIC role can submit crafted query request...

8.6CVSS0.00273EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/08/28 10:49 a.m.13 views

EUVD-2026-67697

Budibase before 3.41.3 fails to enforce role-based authorization on license management endpoints, allowing any authenticated user to delete license keys or manipulate offline tokens. Attackers with basic user privileges can access /api/global/license/ endpoints to disable premium features and...

8.1CVSS5.9AI score0.00275EPSS
SaveExploits0References2
OSV
OSV
added 2026/08/28 10:49 a.m.13 views

CVE-2026-82245 Budibase before 3.41.3 Missing Authorization License Management

Budibase before 3.41.3 fails to enforce role-based authorization on license management endpoints, allowing any authenticated user to delete license keys or manipulate offline tokens. Attackers with basic user privileges can access /api/global/license/ endpoints to disable premium features and...

7.2CVSS5.9AI score
SaveExploits0References4
CVE
CVE
added 2026/08/28 10:49 a.m.19 views

CVE-2026-82245

Budibase before 3.41.3 fails to enforce role-based authorization on its license management endpoints (/api/global/license/*), allowing any authenticated user with basic privileges to delete license keys or manipulate offline tokens. An attacker can thereby disable premium features and downgrade t...

8.1CVSS5.9AI score0.00275EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/08/28 10:49 a.m.34 views

CVE-2026-82246 Budibase Server before 3.41.3 SSRF via Query Import

Budibase Server before 3.41.3 contains a server-side request forgery vulnerability in the query import endpoint that fails to validate user-supplied URLs before fetching content. Attackers can submit arbitrary URLs to retrieve responses from internal services including cloud metadata endpoints an...

7.1CVSS0.00178EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/08/28 10:49 a.m.8 views

EUVD-2026-67698

Budibase Server before 3.41.3 contains a server-side request forgery vulnerability in the query import endpoint that fails to validate user-supplied URLs before fetching content. Attackers can submit arbitrary URLs to retrieve responses from internal services including cloud metadata endpoints an...

7.1CVSS6AI score0.00178EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/08/28 10:49 a.m.33 views

CVE-2026-82245 Budibase before 3.41.3 Missing Authorization License Management

Budibase before 3.41.3 fails to enforce role-based authorization on license management endpoints, allowing any authenticated user to delete license keys or manipulate offline tokens. Attackers with basic user privileges can access /api/global/license/ endpoints to disable premium features and...

8.1CVSS0.00275EPSS
SaveExploits0References2
CVE
CVE
added 2026/08/28 10:49 a.m.21 views

CVE-2026-82246

Budibase Server before 3.41.3 is affected by a server-side request forgery (SSRF) vulnerability in the query import endpoint . The root cause is the failure to validate user-supplied URLs before fetching content, allowing authenticated attackers to submit arbitrary URLs and retrieve responses fro...

7.1CVSS6AI score0.00178EPSS
SaveExploits0References2
Rows per page
Query Builder