Security Advisory

CVE-2026-73300

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-08-12 18:05:51

Last updated 2026-08-12 18:55:16

Assigner GitHub_M

CVSS score not scored

State PUBLISHED

Description

Budibase is an open-source low-code platform. Prior to 3.40.0, the MySQL integration component in Budibase is configured with multipleStatements: true, enabling execution of multiple SQL statements in a single query. Attackers can inject malicious SQL commands through user input fields, leading to complete database compromise. This vulnerability is fixed in 3.40.0.

← Browse all CVEs View on cve.org ↗