CyberRota Analysis
AI-GeneratedBudibase versions prior to 3.40.1 are vulnerable due to improper handling of user-supplied file paths in the MongoDB integration, allowing builders to exploit the system by submitting absolute paths. This could lead to information disclosure, as attackers can determine the existence and readability of files on the shared server. Organizations using Budibase, particularly those integrating with MongoDB or Oracle, should prioritize upgrading to version 3.40.1 to mitigate this risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Budibase is an open-source low-code platform. Prior to 3.40.1, packages/server/src/integrations/mongodb.ts passed builder-controlled tlsCertificateKeyFile and tlsCAFile values directly to MongoClient on Budibase Cloud. A builder could submit absolute server paths through /api/datasources/verify and distinguish readable existing files from missing files by comparing the driver error, exposing a filesystem existence and readability oracle on the shared server. This issue is fixed in version 3.40.1.