CyberRota
← Ana sayfaya dön

CVE-2026-45718

MEDIUM · CVSS 5.4 EPSS %0.15 Public Exploit

Kaynak: NVD + CISA KEV + EPSS · Yayınlanma: 2026-05-27T18:16:25.873 · Çekilme zamanı: 2026-06-25T12:12:10.772460+00:00

CyberRota Yorumu

Detaylı analiz gerekiyor.

Public Exploit Sinyali

Bu CVE için açıklama veya referanslarda public exploit / PoC / GitHub / Metasploit sinyali tespit edildi.

GitHub PoC Linkleri
github.com ↗ github.com ↗

Not: Bu bağlantılar yalnızca güvenlik araştırması ve doğrulama amacıyla listelenmiştir.

CVE
CVE-2026-45718
Severity
MEDIUM
CVSS
5.4
EPSS
%0.15

Orijinal NVD Açıklaması

Budibase is an open-source low-code platform. Prior to 3.38.1, the row action trigger endpoint (POST /api/tables/:sourceId/actions/:actionId/trigger) fails to validate that the user-supplied rowId is within the scope of the view's row filters. A user with access to a filtered view can trigger row actions on any row in the underlying table, including rows explicitly excluded by the view's security filters. This vulnerability is fixed in 3.38.1.