Lucene search
+L

137803 matches found

OSV
OSV
added 2026/07/24 9:44 p.m.8 views

GHSA-V42F-V8XC-J435 Budibase: SSRF via DNS rebinding in the REST datasource integration

Summary Budibase's central outbound-fetch guard fetchWithBlacklist prevents SSRF/DNS-rebinding by resolving the target hostname, checking every resolved IP against the blacklist, and pinning the connection to the validated IP. The pin is implemented as a Node https.Agent makePinnedAgent. The fix...

8.5CVSS6AI score
SaveExploits0References7
Github Security Blog
Github Security Blog
added 2026/07/24 9:44 p.m.13 views

Budibase: SSRF via DNS rebinding in the REST datasource integration

Summary Budibase's central outbound-fetch guard fetchWithBlacklist prevents SSRF/DNS-rebinding by resolving the target hostname, checking every resolved IP against the blacklist, and pinning the connection to the validated IP. The pin is implemented as a Node https.Agent makePinnedAgent. The fix...

8.5CVSS6AI score0.00157EPSS
SaveExploits1References7Affected Software1
OSV
OSV
added 2026/07/24 9:22 p.m.4 views

GHSA-MQHR-6J6H-74P5 Budibase: Unauthenticated REST Datasource Credential Theft via Cross-Origin Auth Leak

Summary Budibase attaches a REST datasource's stored credentials Bearer/Basic tokens and static headers to an outgoing request before it decides which host the request goes to, and never checks that the destination host matches the datasource. A query's request path can be pointed at any host via...

9CVSS6AI score0.00422EPSS
SaveExploits0References5
Github Security Blog
Github Security Blog
added 2026/07/24 9:22 p.m.11 views

Budibase: Unauthenticated REST Datasource Credential Theft via Cross-Origin Auth Leak

Summary Budibase attaches a REST datasource's stored credentials Bearer/Basic tokens and static headers to an outgoing request before it decides which host the request goes to, and never checks that the destination host matches the datasource. A query's request path can be pointed at any host via...

6AI score
SaveExploits0References5Affected Software1
Github Security Blog
Github Security Blog
added 2026/07/24 9:13 p.m.10 views

Budibase: Missing RBAC on GET /api/global/groups allows BASIC users to enumerate all tenant groups and role mappings

Summary The GET /api/global/groups endpoint on the worker service has no role-based authorization middleware. Any authenticated user including BASIC role can enumerate all user groups in the tenant, including their role mappings, user memberships, builder permissions, and the isDefault flag. Step...

4.3CVSS5.9AI score0.00251EPSS
SaveExploits0References5Affected Software1
OSV
OSV
added 2026/07/24 9:13 p.m.7 views

GHSA-4QCJ-M5WP-JMF4 Budibase: Missing RBAC on GET /api/global/groups allows BASIC users to enumerate all tenant groups and role mappings

Summary The GET /api/global/groups endpoint on the worker service has no role-based authorization middleware. Any authenticated user including BASIC role can enumerate all user groups in the tenant, including their role mappings, user memberships, builder permissions, and the isDefault flag. Step...

4.3CVSS5.9AI score0.00251EPSS
SaveExploits0References5
Github Security Blog
Github Security Blog
added 2026/07/24 9:12 p.m.9 views

Budibase: Privilege escalation via public role assignment API missing app-level authorization

Summary Budibase 3.39.19 commit 03fbabae4 is affected by a privilege-escalation / missing-authorization flaw in the public role-assignment API. An app-scoped builder a user who builds only specific apps — user.builder.apps = appA, not a global builder or admin can grant themselves builder access ...

8.8CVSS6.2AI score0.00368EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2026/07/24 9:12 p.m.4 views

GHSA-J9FC-W3MR-X6MV Budibase: Privilege escalation via public role assignment API missing app-level authorization

Summary Budibase 3.39.19 commit 03fbabae4 is affected by a privilege-escalation / missing-authorization flaw in the public role-assignment API. An app-scoped builder a user who builds only specific apps — user.builder.apps = appA, not a global builder or admin can grant themselves builder access ...

8.8CVSS6.2AI score0.00368EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2026/07/24 9:5 p.m.12 views

open-webui terminal proxy path traversal guard bypass via 9x encoded traversal

AI assistance was used to help inspect the code and prepare this report. Summary The fix for GHSA-r2wg-2mcr-66rv is incomplete in v0.9.6 and current main. backend/openwebui/routers/terminals.py documents sanitizeproxypath as decoding until stable, but the implementation stops after 8 unquote...

7.7CVSS5.8AI score0.00362EPSS
SaveExploits1References6Affected Software1
OSV
OSV
added 2026/07/24 9:5 p.m.11 views

GHSA-FRVJ-C5QP-XJ4W open-webui terminal proxy path traversal guard bypass via 9x encoded traversal

AI assistance was used to help inspect the code and prepare this report. Summary The fix for GHSA-r2wg-2mcr-66rv is incomplete in v0.9.6 and current main. backend/openwebui/routers/terminals.py documents sanitizeproxypath as decoding until stable, but the implementation stops after 8 unquote...

7.7CVSS7AI score0.00362EPSS
SaveExploits1References6
Github Security Blog
Github Security Blog
added 2026/07/24 8:51 p.m.9 views

Open WebUI: Model meta.knowledge read-only file access can be upgraded to file write/delete

Summary Current main and v0.9.6 still allow an authenticated user to turn read-only access to another user's file into write/delete access by attaching that file ID to an attacker-controlled workspace model. This is an incomplete-fix variant of GHSA-vjqm-6gcc-62cr. The current fix adds...

5.4CVSS6AI score0.0033EPSS
SaveExploits1References6Affected Software1
OSV
OSV
added 2026/07/24 8:51 p.m.11 views

GHSA-2XWM-4H2Q-GGFX Open WebUI: Model meta.knowledge read-only file access can be upgraded to file write/delete

Summary Current main and v0.9.6 still allow an authenticated user to turn read-only access to another user's file into write/delete access by attaching that file ID to an attacker-controlled workspace model. This is an incomplete-fix variant of GHSA-vjqm-6gcc-62cr. The current fix adds...

5.4CVSS6AI score0.0033EPSS
SaveExploits1References6
IBM Security Bulletins
IBM Security Bulletins
added 2026/07/24 8:41 p.m.5 views

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to arbitrary code execution in HuggingFace Transformers [CVE-2026-1839]

Summary IBM Watson Speech Services Cartridge is vulnerable to arbitrary code execution in HuggingFace Transformers, due to a flaw in the Trainer class, that allows for arbitrary code execution CVE-2026-1839. HuggingFace Transformers is used in our speech runtimes. This vulnerabilitiy has been...

7.8CVSS7.3AI score0.00349EPSS
SaveExploits1Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2026/07/24 7:32 p.m.11 views

Security Bulletin: Security Vulnerability in Eclipse Jetty affects IBM Sterling B2B Integrator and IBM Sterling File Gateway (CVE-2026-1605)

Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed vulnerability due to Eclipse Jetty Vulnerability Details CVEID:CVE-2026-1605 DESCRIPTION: In Eclipse Jetty, versions 12.0.0-12.0.31 and 12.1.0-12.0.5, class GzipHandler exposes a vulnerability when a compressed HTTP...

7.5CVSS5.9AI score0.00625EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2026/07/24 7:29 p.m.9 views

Security Bulletin: SQL injection Security Vulnerability in IBM Sterling B2B Integrator and IBM Sterling File Gateway (CVE-2026-7769)

Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed vulnerability due to SQL injection. Vulnerability Details CVEID:CVE-2026-7769 DESCRIPTION: IBM Sterling File Gateway is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, whic...

8.1CVSS6AI score0.00276EPSS
SaveExploits0Affected Software1
Github Security Blog
Github Security Blog
added 2026/07/24 5:3 p.m.15 views

Open WebUI: Cross-user model-list exposure via static cache key in get_all_models (aiocache key= vs key_builder= misuse)

Summary The getallmodels handlers in routers/openai.py and routers/ollama.py intended to cache their permission-filtered model lists per user, but the @cached decorator was misconfigured: it passed a key= lambda instead of keybuilder=. In aiocache 0.12.3 the pinned version, key= is a static cache...

5CVSS5.8AI score0.00297EPSS
SaveExploits1References6Affected Software1
OSV
OSV
added 2026/07/24 5:3 p.m.5 views

GHSA-3WP3-XXJ9-5JQQ Open WebUI: Cross-user model-list exposure via static cache key in get_all_models (aiocache key= vs key_builder= misuse)

Summary The getallmodels handlers in routers/openai.py and routers/ollama.py intended to cache their permission-filtered model lists per user, but the @cached decorator was misconfigured: it passed a key= lambda instead of keybuilder=. In aiocache 0.12.3 the pinned version, key= is a static cache...

3.5CVSS5.8AI score0.00297EPSS
SaveExploits1References6
Github Security Blog
Github Security Blog
added 2026/07/24 5:1 p.m.16 views

Open WebUI: Cross-user code-interpreter and tool execution via unvalidated Socket.IO event-caller session_id

Summary An authenticated low-privilege user can execute arbitrary code-interpreter Python and tools inside another user's authenticated session. The Socket.IO event-caller geteventcall delivers execute:python / execute:tool events to a client-supplied sessionid after only checking that the sessio...

9CVSS6.8AI score0.00308EPSS
SaveExploits0References6Affected Software1
OSV
OSV
added 2026/07/24 5:1 p.m.7 views

GHSA-74H3-CXQ7-VC5Q Open WebUI: Cross-user code-interpreter and tool execution via unvalidated Socket.IO event-caller session_id

Summary An authenticated low-privilege user can execute arbitrary code-interpreter Python and tools inside another user's authenticated session. The Socket.IO event-caller geteventcall delivers execute:python / execute:tool events to a client-supplied sessionid after only checking that the sessio...

7.7CVSS6.8AI score0.00308EPSS
SaveExploits0References6
OSV
OSV
added 2026/07/24 4:58 p.m.7 views

GHSA-RQJ7-6WRP-6G2G Open WebUI: POST /api/v1/images/edit bypasses the global image-edit switch and the per-user image-generation permission

Summary POST /api/v1/images/edit performed no authorization beyond requiring a verified account. Every other image-editing surface in Open WebUI enforces the global image-edit switch and the per-user image-generation permission — the /api/v1/images/generations route, the built-in editimage tool,...

4.3CVSS5.9AI score0.00259EPSS
SaveExploits1References6
Rows per page
Query Builder