https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T05:57:52.646706+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-67311 CVE-2026-67311 — Budibase before 3.38.1 SSRF Blacklist Bypass via HTTP Redirect 2026-10-08T05:57:52.663255+00:00

Affected: budibase

Budibase before 3.38.1 contains a server-side request forgery vulnerability in the REST datasource integration that fails to validate HTTP redirects against the IP blacklist. Attackers with Builder role can configure a REST datasource pointing to an external server that returns a redirect to internal IP addresses, bypassing blacklist protection to access cloud metadata endpoints and internal services.