CVE-2023-29010 BudiBase Server-Side Request Forgery vulnerability

Budibase is a low code platform for creating internal tools, workflows, and admin panels. Versions prior to 2.4.3 07 March 2023 are vulnerable to Server-Side Request Forgery. This can lead to an attacker gaining access to a Budibase AWS secret key. Users of Budibase cloud need to take no action...

CVE-2023-29010

CVE-2023-29010 affects Budibase: versions prior to 2.4.3 are vulnerable to Server-Side Request Forgery (SSRF) that can lead to exposure of an AWS secret key. The advisory notes that Budibase cloud users need to take no action, while self-hosted deployments on public internet with metadata-accessi...

PT-2023-22085 · Budibase · Budibase

Name of the Vulnerable Software and Affected Versions: Budibase versions prior to 2.4.3 Description: Budibase is a low code platform for creating internal tools, workflows, and admin panels. The issue can lead to an attacker gaining access to a Budibase AWS secret key due to Server-Side Request...

Budibase 代码问题漏洞

Budibase is a low-code platform for creating in-house applications, workflows and admin panels in minutes, open-sourced by Budibase UK. A code issue vulnerability exists in Budibase versions prior to 2.4.3 that stems from the presence of a Server Request Forgery SSRF vulnerability. An attacker...

GHSA-X92G-49GH-63QM Budibase Improper Control of Dynamically-Managed Code Resources vulnerability

Improper Control of Dynamically-Managed Code Resources in GitHub repository budibase/budibase prior to 1.3.20...

Budibase Improper Control of Dynamically-Managed Code Resources vulnerability

Improper Control of Dynamically-Managed Code Resources in GitHub repository budibase/budibase prior to 1.3.20...

@budibase/client (>=1.1.32-alpha.0, <=1.3.19-alpha.7), @budibase/frontend-core (>=1.1.32-alpha.0, <=1.3.19-alpha.7) +1 more potentially affected by CVE-2022-3225 via @budibase/bbui (>=1.1.32-alpha.0, <=1.3.19-alpha.7)

@budibase/bbui NPM version =1.1.32-alpha.0, =1.1.32-alpha.0, =1.1.32-alpha.0, =1.1.32-alpha.0, =1.3.19-alpha.7 Source cves: CVE-2022-3225 Source advisory: OSV:GHSA-X92G-49GH-63QM...

CVE-2022-3225

Improper Control of Dynamically-Managed Code Resources in GitHub repository budibase/budibase prior to 1.3.20...

CVE-2022-3225

Improper Control of Dynamically-Managed Code Resources in GitHub repository budibase/budibase prior to 1.3.20...

CVE-2022-3225

CVE-2022-3225 affects budibase/budibase prior to 1.3.20, described as Improper Control of Dynamically-Managed Code Resources with an associated access-control weakness. The public documents also annotate this as an Improper Access Control vulnerability (GHSA and related advisories). Root cause ci...

CVE-2022-3225 Improper Control of Dynamically-Managed Code Resources in budibase/budibase

Improper Control of Dynamically-Managed Code Resources in GitHub repository budibase/budibase prior to 1.3.20...

CVE-2022-3225 Improper Control of Dynamically-Managed Code Resources in budibase/budibase

Improper Control of Dynamically-Managed Code Resources in GitHub repository budibase/budibase prior to 1.3.20...

Budibase 访问控制错误漏洞

Budibase is a low-code platform for creating internal applications, workflows and admin panels in minutes, open-sourced by Budibase UK. An Access Control Error vulnerability exists in Budibase versions prior to 1.3.20 that stems from incorrect access control...

PT-2022-21176 · Budibase · Budibase

Name of the Vulnerable Software and Affected Versions: budibase/budibase versions prior to 1.3.20 Description: The issue is related to improper access control in the GitHub repository budibase/budibase. There is no information provided about the estimated number of potentially affected devices...

Mass Assignment in Self Controller Leads To Vertical Privillege Escalation

Description Hello there, y'all! How are you doing? Hope you are doing great! I was testing Budibase and noticed that the api endpoint /api/global/self, which is used for different purposes updating an user's name or their password, always receives an entire object containing most of the attribute...