Skip to content
Threat Feed

Product

@Budibase/Server (< 3.38.1)

1 brief RSS
high advisory

Budibase REST Datasource SSRF via HTTP Redirect Bypass (CVE-2026-45715)

Budibase is vulnerable to server-side request forgery (SSRF) via HTTP redirects in the REST datasource integration, allowing authenticated Builders to bypass IP blacklists and access internal services.

@budibase/server +1 ssrf budibase cve-2026-45715
2r 1t 3i