CyberRota Analysis
AI-GeneratedBudibase Server versions prior to 3.41.3 are vulnerable to a server-side request forgery (SSRF) flaw in the query import endpoint, which inadequately validates user-supplied URLs. This weakness allows attackers to exploit the server by fetching sensitive data from internal services, including cloud metadata and other restricted resources. Organizations using affected versions should prioritize patching to mitigate the risk of unauthorized access to internal systems.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Budibase Server before 3.41.3 contains a server-side request forgery vulnerability in the query import endpoint that fails to validate user-supplied URLs before fetching content. Attackers can submit arbitrary URLs to retrieve responses from internal services including cloud metadata endpoints and other restricted network resources.