Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/06/22 11:8 p.m.14 views

Budibase has an Account Impersonation Issue — Chat Identity Link Hijacking via Missing Consent & CSRF

Title Chat Identity Link Hijacking — Attacker Can Silently Map Their Slack/Discord Identity to Any Authenticated Budibase User's Account Severity High — CVSS 3.1: AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N = 7.3 Affected Product - Product: Budibase - Version: 3.37.2 introduced in this version - Componen...

7.3CVSS5.5AI score0.00151EPSS
SaveExploits1References5Affected Software1
Rows per page
Query Builder