Lucene search
+L

7 matches found

NVD
NVD
•added 2026/08/28 12:16 p.m.•15 views

CVE-2026-82243

Budibase Server before 3.41.3 contains a server-side request forgery vulnerability in the datasource verify endpoint that allows builder-level users to supply arbitrary URLs without SSRF validation. Attackers can exploit this to leak internal CouchDB credentials by making requests to...

8.3CVSS0.00333EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/08/28 10:49 a.m.•44 views

CVE-2026-82243 Budibase Server before 3.41.3 SSRF with Credential Leakage

Budibase Server before 3.41.3 contains a server-side request forgery vulnerability in the datasource verify endpoint that allows builder-level users to supply arbitrary URLs without SSRF validation. Attackers can exploit this to leak internal CouchDB credentials by making requests to...

8.3CVSS0.00333EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/08/28 10:49 a.m.•15 views

EUVD-2026-67695

Budibase Server before 3.41.3 contains a server-side request forgery vulnerability in the datasource verify endpoint that allows builder-level users to supply arbitrary URLs without SSRF validation. Attackers can exploit this to leak internal CouchDB credentials by making requests to...

8.3CVSS6AI score0.00333EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/08/28 10:49 a.m.•17 views

CVE-2026-82243 Budibase Server before 3.41.3 SSRF with Credential Leakage

Budibase Server before 3.41.3 contains a server-side request forgery vulnerability in the datasource verify endpoint that allows builder-level users to supply arbitrary URLs without SSRF validation. Attackers can exploit this to leak internal CouchDB credentials by making requests to...

8.3CVSS5.9AI score0.00333EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/28 12:00 a.m.•26 views

PT-2026-83095

Budibase Server before 3.41.3 contains a server-side request forgery vulnerability in the datasource verify endpoint that allows builder-level users to supply arbitrary URLs without SSRF validation. Attackers can exploit this to leak internal CouchDB credentials by making requests to...

8.3CVSS6AI score0.00333EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/02/25 6:57 p.m.•21 views

EUVD-2026-8646

Budibase: Remote Code Execution via Unsafe eval in View Filter Map Function Budibase Cloud...

9.9CVSS5.5AI score0.00559EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2026/02/25 12:00 a.m.•44 views

PT-2026-21923

Name of the Vulnerable Software and Affected Versions Budibase versions prior to 3.30.4 Description Budibase, a low-code platform for creating internal tools, workflows, and admin panels, contains an unsafe eval vulnerability in its view filtering implementation. This issue affects Budibase Cloud...

9.9CVSS6.5AI score0.00559EPSS
SaveExploits1References16
Rows per page
Query Builder