budibase vulnerabilities (npm)
7 vulnerabilities.
-
budibasenpm Budibase: Database Connector SQL Injections in PostgreSQL, MS SQL, and MySQL 8.4 High -
budibasenpm Budibase: SSRF via User-Controlled queryId in Automation Execute Query Step 5.1 Medium -
budibasenpm Budibase: Unrestricted Upload of File with Dangerous Type 7.6 High -
budibasenpm Budibase: Row Action Trigger Bypasses View Row Filter Security Boundary Allowing Action on Out-of-Scope Rows 5.4 Medium -
budibasenpm Budibase: SSRF via trivial `.tar.gz` substring bypass in Plugin URL upload (`/api/plugin`) 7.7 High -
budibasenpm Budibase Unrestricted Server-Side Request Forgery (SSRF) via REST Datasource Query Preview 8.7 High -
budibasenpm Budibase Vulnerable to Remote Code Execution via Unsafe eval() in View Filter Map Function (Budibase Cloud) 9.9 Critical