Lucene search
K

3 matches found

OSV
OSV
added 2026/02/25 6:57 p.m.3 views

GHSA-RVHR-26G4-P2R8 Budibase: Remote Code Execution via Unsafe eval() in View Filter Map Function (Budibase Cloud)

Summary A critical unsafe eval vulnerability in Budibase's view filtering implementation allows any authenticated user including free tier accounts to execute arbitrary JavaScript code on the server. This vulnerability ONLY affects Budibase Cloud SaaS - self-hosted deployments use native CouchDB...

9.9CVSS6.5AI score0.00098EPSS
Exploits1References6
Github Security Blog
Github Security Blog
added 2026/02/25 6:57 p.m.4 views

Budibase: Remote Code Execution via Unsafe eval() in View Filter Map Function (Budibase Cloud)

Summary A critical unsafe eval vulnerability in Budibase's view filtering implementation allows any authenticated user including free tier accounts to execute arbitrary JavaScript code on the server. This vulnerability ONLY affects Budibase Cloud SaaS - self-hosted deployments use native CouchDB...

9.9CVSS6.4AI score0.00098EPSS
Exploits1References6Affected Software1
OSV
OSV
added 2026/02/25 3:11 p.m.2 views

CVE-2026-27702 Budibase Vulnerable to Remote Code Execution via Unsafe eval() in View Filter Map Function (Budibase Cloud)

Budibase is a low code platform for creating internal tools, workflows, and admin panels. Prior to version 3.30.4, an unsafe eval vulnerability in Budibase's view filtering implementation allows any authenticated user including free tier accounts to execute arbitrary JavaScript code on the server...

9.9CVSS6.3AI score0.00098EPSS
Exploits1References6
Rows per page
Query Builder