Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
•added 2026/07/24 9:16 p.m.•26 views

Budibase: Server Filesystem Existence/Read Oracle via Builder-Controlled MongoDB tlsCertificateKeyFile

Summary When creating a MongoDB datasource, Budibase passes the tlsCertificateKeyFile and tlsCAFile fields straight to the MongoDB driver as server-side file paths. On Budibase Cloud a customer cannot place files on the server, so these fields only let a builder reference arbitrary absolute paths...

5.1CVSS6AI score0.00319EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder