Skip to content
Threat Feed
Subscribe

Product

Budibase (3.39.4)

1 brief RSS
high advisory

Budibase S3 Presigned URL Authorization Regression

A regression in Budibase v3.39.4 allows BASIC app users to bypass authorization controls and obtain S3 PutObject presigned URLs, enabling low-privileged users to upload arbitrary content to any S3 bucket that the system's stored IAM credentials can access.

Budibase authorization-bypass privilege-escalation cloud-security s3 web-application
1r 2t