CyberRota Analysis
AI-GeneratedBudibase prior to version 3.41.3 is vulnerable due to improper handling of user-provided URLs in its automation steps, which allows authenticated users to exploit this flaw to make unauthorized server-side requests to sensitive cloud metadata and internal services. The impact of this vulnerability is significant, as it could lead to data exposure or unauthorized access to internal systems. Organizations using Budibase should prioritize upgrading to the latest version to mitigate this risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Budibase is an open-source low-code platform. Prior to 3.41.3, automation steps in packages/server/src/automations/steps/outgoingWebhook.ts, packages/server/src/automations/steps/zapier.ts, packages/server/src/automations/steps/n8n.ts, packages/server/src/automations/steps/slack.ts, and packages/server/src/automations/steps/discord.ts use node-fetch on user-provided URLs without the BLACKLIST_IPS enforcement used by the REST integration, allowing an authenticated user to make server-side requests to cloud metadata and internal services. This issue is fixed in version 3.41.3.