Lucene search
+L

1 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/03 12:00 a.m.•5 views

CVE-2026-25044: Improper Neutralization of Special Elements used in an OS Command

Budibase is an open-source low-code platform. Prior to version 3.33.4, the bash automation step executes user-provided commands using execSync without proper sanitization or validation. User input is processed through processStringSync which allows template interpolation, potentially allowing...

8.8CVSS6.1AI score0.00466EPSS
SaveExploits0References3
Rows per page
Query Builder