CyberRota Analysis
AI-GeneratedBudibase's MySQL integration component, prior to version 3.40.0, is vulnerable due to the configuration allowing multiple SQL statements to be executed in a single query. This flaw enables attackers to inject malicious SQL commands via user input, potentially leading to full database compromise. Organizations using Budibase should prioritize upgrading to version 3.40.0 to mitigate this critical risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Budibase is an open-source low-code platform. Prior to 3.40.0, the MySQL integration component in Budibase is configured with multipleStatements: true, enabling execution of multiple SQL statements in a single query. Attackers can inject malicious SQL commands through user input fields, leading to complete database compromise. This vulnerability is fixed in 3.40.0.