๐Ÿ” CVE Alert

CVE-2022-3225

HIGH 8.8

Improper Control of Dynamically-Managed Code Resources in budibase/budibase

CVSS Score
8.8
EPSS Score
0.0%
EPSS Percentile
0th

Improper Control of Dynamically-Managed Code Resources in GitHub repository budibase/budibase prior to 1.3.20.

CWE CWE-913
Vendor budibase
Product budibase/budibase
Published Sep 16, 2022
Last Updated Aug 3, 2024
Stay Ahead of the Next One

Get instant alerts for budibase budibase/budibase

Be the first to know when new high vulnerabilities affecting budibase budibase/budibase are published โ€” delivered to Slack, Telegram or Discord.

Get Free Alerts โ†’ Free ยท No credit card ยท 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Affected Versions

budibase / budibase/budibase
unspecified < 1.3.20

References

NVD โ†— CVE.org โ†— EPSS Data โ†—
huntr.dev: https://huntr.dev/bounties/a13a56b7-04da-4560-b8ec-0d637d12a245 github.com: https://github.com/budibase/budibase/commit/d35864be0854216693a01307f81ffcabf6d549df