Security Advisory

CVE-2026-82246

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-08-28 10:49:32

Last updated 2026-08-28 14:45:27

Assigner VulnCheck

CVSS score 7.1

State PUBLISHED

Description

Budibase Server before 3.41.3 contains a server-side request forgery vulnerability in the query import endpoint that fails to validate user-supplied URLs before fetching content. Attackers can submit arbitrary URLs to retrieve responses from internal services including cloud metadata endpoints and other restricted network resources.

← Browse all CVEs View on cve.org ↗