DeutschShown in its original language — a full translation is planned for a future version.
Budibase: Mehrere Schwachstellen
view advisory published 2026-05-20
Ein Angreifer kann mehrere Schwachstellen in Budibase ausnutzen, um Administratorrechte zu erlangen, Sicherheitsmaßnahmen zu umgehen, Cross-Site-Scripting-Angriffe durchzuführen, Daten zu manipulieren oder vertrauliche Informationen offenzulegen.
01
describes (9)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-48153US | — | — | ||
Budibase is an open-source low-code platform. Prior to 3.39.0, fetchToken in the OAuth2 SDK makes a POST to a builder-supplied URL with plain node-fetch, skipping the blacklist.isB… | ||||
| CVE-2026-48152US | —OT elevated | — | ||
Budibase is an open-source low-code platform. Prior to 3.39.0, the single-datasource GET and PUT routes are guarded by generic TABLE READ, not by Builder/Admin permission or dataso… | ||||
| CVE-2026-48151US | —OT elevated | — | ||
Budibase is an open-source low-code platform. Prior to 3.39.0, the webhook schema-building endpoint is registered under builderRoutes, but the generic authorization middleware skip… | ||||
| CVE-2026-48150US | — | — | ||
Budibase is an open-source low-code platform. Prior to 3.39.0, /api/public/v1/roles/assign is guarded by the builderOrAdmin middleware, which passes any user who is a builder for t… | ||||
| CVE-2026-48149US | — | — | ||
Budibase is an open-source low-code platform. Prior to 3.39.0, the Budibase Text component renders markdown by assigning marked.parse(markdown) straight to innerHTML with no saniti… | ||||
| CVE-2026-48148US | — | — | ||
Budibase is an open-source low-code platform. Prior to 3.35.3, the VectorDB configuration endpoint in Budibase accepts a host parameter that undergoes no validation against intern… | ||||
| CVE-2026-48147US | — | — | ||
Budibase is an open-source low-code platform. Prior to 3.35.4, the buildMatcherRegex() / matches() functions in packages/backend-core/src/middleware/matchers.ts route patterns are… | ||||
| CVE-2026-48146US | — | — | ||
Budibase is an open-source low-code platform. Prior to 3.39.0, the OAuth2 token fetch function in packages/server/src/sdk/workspace/oauth2/utils.ts uses raw fetch(config.url) with… | ||||
| CVE-2026-48128US | — | — | ||
Budibase is an open-source low-code platform. Prior to 3.39.0, the executeQuery automation step in Budibase accepts a queryId from automation step inputs and passes it directly to… | ||||
02
references
External citations — patches, advisories, analysis.
- GitHub Security Advisory GHSA-3gp5-q4jw-3v94 vom 2026-05-20external
- GitHub Security Advisory GHSA-4q6h-8p4v-67vq vom 2026-05-20external
- GitHub Security Advisory GHSA-57p7-9h9w-xqpw vom 2026-05-20external
- GitHub Security Advisory GHSA-6964-pp88-6wp9 vom 2026-05-20external
- GitHub Security Advisory GHSA-6xp4-cf37-ppjh vom 2026-05-20external
- GitHub Security Advisory GHSA-cv96-5348-p5p8 vom 2026-05-20external
- GitHub Security Advisory GHSA-g6qx-g4pr-92v7 vom 2026-05-20external
- GitHub Security Advisory GHSA-qhv3-wjg8-6fx6 vom 2026-05-20external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan