Budibase versions prior to 3.45.0 contain an arbitrary file read vulnerability caused by enabled external JSON reference resolution during OpenAPI/Swagger file imports.
Budibase +2
vulnerability
web-application
data-exfiltration
sql-injection
cve
authentication-bypass
sso
identity-management
+6
1r
7t
3c
updated