Skip to content
Threat Feed
Subscribe

Product

Budibase

5 briefs RSS
high advisory

Budibase: Multiple Vulnerabilities

Multiple vulnerabilities in Budibase allow an attacker to gain elevated privileges, perform SQL injection, bypass security measures, take over user accounts, manipulate or disclose data, and trigger a denial-of-service condition, enabling various malicious activities impacting data integrity, confidentiality, and system availability.

Budibase +3 vulnerability sql-injection privilege-escalation defense-evasion data-exfiltration denial-of-service
5t 1c 9i updated
high advisory

Budibase Multiple Vulnerabilities

Multiple vulnerabilities in Budibase could be exploited by an attacker to gain administrative privileges, bypass security measures, perform cross-site scripting attacks, manipulate data, or disclose confidential information.

Budibase vulnerability privilege-escalation defense-evasion execution impact discovery cloud
2r 5t
high advisory

Budibase Security Bypass Vulnerability

An authenticated remote attacker can exploit a vulnerability in Budibase to bypass security measures and manipulate data.

Budibase security-bypass data-manipulation
2r 1t
high advisory

Budibase REST Datasource SSRF via HTTP Redirect Bypass (CVE-2026-45715)

Budibase is vulnerable to server-side request forgery (SSRF) via HTTP redirects in the REST datasource integration, allowing authenticated Builders to bypass IP blacklists and access internal services.

@budibase/server +1 ssrf budibase cve-2026-45715
2r 1t 3i
critical advisory

Budibase Authentication Bypass via Unanchored Regex

Budibase versions 3.35.3 and earlier are vulnerable to an authentication bypass due to unanchored regular expressions in the public endpoint matcher, allowing unauthenticated attackers to access protected endpoints by manipulating the query string.

Budibase authentication-bypass web-application
2r 1t 2i