DeutschShown in its original language — a full translation is planned for a future version.
Budibase: Mehrere Schwachstellen
view advisory published 2026-05-11
Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Budibase ausnutzen, um Sicherheitsvorkehrungen zu umgehen, Informationen offenzulegen, Code auszuführen oder seine Rechte zu erweitern.
01
describes (4)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-45719US | — | — | ||
Budibase is an open-source low-code platform. Prior to 3.38.1, the V1 Views API (POST /api/views) accepts a calculation parameter from the request body that is interpolated directl… | ||||
| CVE-2026-45718US | —OT elevated | — | ||
Budibase is an open-source low-code platform. Prior to 3.38.1, the row action trigger endpoint (POST /api/tables/:sourceId/actions/:actionId/trigger) fails to validate that the use… | ||||
| CVE-2026-45716US | — | — | ||
Budibase is an open-source low-code platform. Prior to 3.38.1, the POST /api/global/users/onboard endpoint is protected by workspaceBuilderOrAdmin middleware, allowing any user wit… | ||||
| CVE-2026-45715US | — | — | ||
Budibase is an open-source low-code platform. Prior to 3.38.1, the REST datasource integration (packages/server/src/integrations/rest.ts) follows HTTP redirects without re-checking… | ||||
02
references
External citations — patches, advisories, analysis.
- GitHub Security Advisory GHSA-3263-v5v9-xq8q vom 2026-05-11external
- GitHub Security Advisory GHSA-363w-hvwh-w7m6 vom 2026-05-11external
- GitHub Security Advisory GHSA-86f3-cqpq-wp9m vom 2026-05-11external
- GitHub Security Advisory GHSA-c54j-xp92-wh28 vom 2026-05-11external
- GitHub Security Advisory GHSA-fgqv-jh4g-pvg2 vom 2026-05-11external
- WID-SEC-W-2026-1477 - CSAF Versionself
- WID-SEC-2026-1477 - Portal Versionself
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan