Product

Budibase (3.39.4 to 3.39.x)

1 brief RSS

NoSQL Injection Vulnerability in Budibase MongoDB Integration

Budibase versions prior to 3.40.0 are vulnerable to NoSQL injection in the MongoDB datasource due to improper handling of user-supplied parameters, allowing unauthorized data access and potential server-side execution.

Budibase +2 ssrf web-vulnerability web-application privilege-escalation auth-bypass web-application-vulnerability authorization-bypass cloud-security

1r 3t 4c updated 5m ago