Skip to content
Threat Feed
Subscribe

Product

Budibase Server (<= 3.38.1)

1 brief RSS
critical advisory

SQL Injection Vulnerability in Budibase MySQL Integration

A critical SQL injection vulnerability was discovered in Budibase's MySQL integration (versions <= 3.38.1) that allows remote attackers to execute arbitrary SQL commands through user input fields due to the `multipleStatements: true` configuration, leading to complete database compromise.

Budibase Server +1 sql-injection web-application vulnerability nosql-injection data-exfiltration data-destruction application-vulnerability csrft +4
1r 7t