https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T22:18:19.567571+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-45715 CVE-2026-45715 — Budibase: SSRF Bypass via HTTP Redirect in REST Datasource Integration 2026-10-10T22:18:19.568744+00:00

Affected: budibase

Budibase is an open-source low-code platform. Prior to 3.38.1, the REST datasource integration (packages/server/src/integrations/rest.ts) follows HTTP redirects without re-checking the IP blacklist, allowing an authenticated Builder to access internal services (cloud metadata, databases) by redirecting through an attacker-controlled server. This vulnerability is fixed in 3.38.1.