CyberRota Analysis
AI-GeneratedBudibase versions prior to 3.39.4 are vulnerable due to improper handling of attachment values in the AI table-generation feature, allowing potentially malicious references to internal services or cloud metadata endpoints. This could lead to unauthorized data exposure, as unvalidated responses may be stored as attachments. Organizations using Budibase for low-code development, especially those leveraging the AI features, should prioritize upgrading to version 3.39.4 to mitigate this risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Budibase is an open-source low-code platform. Prior to 3.39.4, uploadUrl in packages/server/src/utilities/fileUtils.ts used a bare server-side fetch for string attachment values passed by processAttachments in packages/server/src/sdk/workspace/ai/helpers/rows.ts. A builder with the AI table-generation feature could cause an attachment value to reference an internal service or cloud metadata endpoint, and the response would be stored as an attachment without fetchWithBlacklist validation. This issue is fixed in version 3.39.4.