Incorrect Authorization

Overview @budibase/server is a Budibase Web Server Affected versions of this package are vulnerable to Incorrect Authorization in the mergeConfigs process. An attacker can obtain sensitive REST datasource authentication credentials by modifying the config.url to redirect requests to an...