@budibase/client (>=1.1.32-alpha.0, <=1.3.19-alpha.7), @budibase/frontend-core (>=1.1.32-alpha.0, <=1.3.19-alpha.7) +1 more potentially affected by CVE-2022-3225 via @budibase/bbui (>=1.1.32-alpha.0, <=1.3.19-alpha.7)

@budibase/bbui NPM version =1.1.32-alpha.0, =1.1.32-alpha.0, =1.1.32-alpha.0, =1.1.32-alpha.0, =1.3.19-alpha.7 Source cves: CVE-2022-3225 Source advisory: OSV:GHSA-X92G-49GH-63QM...

Budibase Improper Control of Dynamically-Managed Code Resources vulnerability

Improper Control of Dynamically-Managed Code Resources in GitHub repository budibase/budibase prior to 1.3.20...

CVE-2022-3225

Improper Control of Dynamically-Managed Code Resources in GitHub repository budibase/budibase prior to 1.3.20...

CVE-2022-3225

Improper Control of Dynamically-Managed Code Resources in GitHub repository budibase/budibase prior to 1.3.20...

CVE-2022-3225

CVE-2022-3225 affects budibase/budibase prior to 1.3.20, described as Improper Control of Dynamically-Managed Code Resources with an associated access-control weakness. The public documents also annotate this as an Improper Access Control vulnerability (GHSA and related advisories). Root cause ci...

CVE-2022-3225 Improper Control of Dynamically-Managed Code Resources in budibase/budibase

Improper Control of Dynamically-Managed Code Resources in GitHub repository budibase/budibase prior to 1.3.20...

CVE-2022-3225 Improper Control of Dynamically-Managed Code Resources in budibase/budibase

Improper Control of Dynamically-Managed Code Resources in GitHub repository budibase/budibase prior to 1.3.20...

Budibase 访问控制错误漏洞

Budibase is a low-code platform for creating internal applications, workflows and admin panels in minutes, open-sourced by Budibase UK. An Access Control Error vulnerability exists in Budibase versions prior to 1.3.20 that stems from incorrect access control...

CVE-2022-3225: Improper Control of Dynamically-Managed Code Resources

Improper Control of Dynamically-Managed Code Resources in GitHub repository budibase/budibase prior to 1.3.20...

PT-2022-21176

Name of the Vulnerable Software and Affected Versions budibase/budibase versions prior to 1.3.20 Description The issue is related to improper access control in the GitHub repository budibase/budibase. There is no information provided about the estimated number of potentially affected devices...

Mass Assignment in Self Controller Leads To Vertical Privillege Escalation

Description Hello there, y'all! How are you doing? Hope you are doing great! I was testing Budibase and noticed that the api endpoint /api/global/self, which is used for different purposes updating an user's name or their password, always receives an entire object containing most of the attribute...